Cisco 6500 - Catalyst Series 10 Gigabit EN Interface Module Expansion, Configuration Manual, Page: 577 / 742

25-11
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Chapter 25 Monitoring the Firewall Services Module
Configuring and Managing Syslog Messages
Automatically Saving the Full Log Buffer to an FTP Server
For more information about saving the buffer, see the “Saving the Current Contents of the Log Buffer to
Internal Flash Memory” section.
To specify that messages in the log buffer should be saved to an FTP server each time the buffer wraps,
perform the following steps:
Step 1
To enable the FWSM to send the log buffer contents to an FTP server each time the buffer wraps, enter
the following command:
hostname(config)# logging ftp-bufferwrap
Step 2
To identify the FTP server, enter the following command:
hostname(config)# logging ftp-server server path username password
where the server argument specifies the IP address of the external FTP server.
The path argument specifies the directory path on the FTP server where the log buffer data is to be saved.
This path is relative to the FTP root directory.
The username argument specifies a username that is valid for logging in to the FTP server.
The password argument specifies the password for the username specified.
For example:
hostname(config)# logging ftp-server 10.1.1.1 /syslogs logsupervisor 1luvMy10gs
Saving the Current Contents of the Log Buffer to Internal Flash Memory
At any time, you can save the contents of the buffer to internal flash memory. To save the current contents
of the log buffer to internal flash memory, enter the following command:
hostname(config)#
logging savelog
[ savefile ]
For example, the following command saves the contents of the log buffer to internal flash memory using
the filename, latest-logfile.txt:
hostname(config)# logging savelog latest-logfile.txt
Clearing the Contents of the Log Buffer
To delete the contents of the log buffer, enter the following command:
hostname(config)# clear logging buffer
Filtering Syslog Messages
This section describes how to specify which syslog messages should go to output destinations, and
includes the following topics:
•
Message Filtering Overview, page 25-12
•
Filtering Syslog Messages by Class, page 25-12
• Filtering Syslog Messages with Custom Message Lists, page 25-14