Cisco 500 Series, Configuration Manual

Page: 956 / 1140

42-20
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 42 Monitoring the Security Appliance
Configuring and Managing Logs
Including the Date and Time in System Log Messages
To specify that system log messages should include the date and time that the system log messages was
generated, enter the following command:
hostname(config)# logging timestamp
Including the Device ID in System Log Messages
To configure the adaptive security appliance to include a device ID in non-EMBLEM-format system log
messages, enter the following command:
hostname(config)# logging device-id
{
context-name
|
hostname | ipaddress interface_name |
string text
}
You can specify only one type of device ID for the system log messages.
The context-name keyword indicates that the name of the current context should be used as the device
ID (applies to multiple context mode only). If you enable the logging device ID for the admin context in
multiple context mode, messages that originate in the system execution space use a device ID of
system ,
and messages that originate in the admin context use the name of the admin context as the device ID.
The hostname keyword specifies that the hostname of the adaptive security appliance should be used as
the device ID.
The ipaddress interface_name argument specifies that the IP address of the interface specified as
interface_name should be used as the device ID. If you use the ipaddress keyword, the device ID
becomes the specified adaptive security appliance interface IP address, regardless of the interface from
which the system log message is sent. This keyword provides a single, consistent device ID for all system
log messages that are sent from the device.
The string text argument specifies that the text string should be used as the device ID. The string can
contain as many as 16 characters. You cannot use blank spaces or any of the following characters:
•
& (ampersand)
• ' (single quote)
•
" (double quote)
• < (less than)
•
> (greater than)
• ? (question mark)
Note If enabled, the device ID does not appear in EMBLEM-formatted system log messages or SNMP traps.
The following example enables the logging device ID for the adaptive security appliance:
hostname(config)# logging device-id hostname
The following example enables the logging device ID for a security context on the adaptive security
appliance:
hostname(config)#
logging device-id context-name