Cisco 500 Series, Руководство по настройке

Страница: 947 / 1140

42-11
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 42 Monitoring the Security Appliance
Configuring and Managing Logs
Where the severity_level argument specifies the severity levels of messages to be sent to ASDM. You
can specify the severity level number (0 through 7) or name. For severity level names, see the “Severity
Levels” section on page 42-24 . For example, if you set the level to 3, then the adaptive security appliance
sends system log messages for level 3, 2, 1, and 0.
The message_list argument specifies a customized message list that identifies the system log messages
to send to ASDM. For information about creating custom message lists, see the “Filtering System Log
Messages with Custom Message Lists” section on page 42-18 .
The following example shows how enable logging and send to the ASDM log buffer system log messages
of severity levels 0, 1, and 2.
hostname(config)#
logging asdm 2
Step 2 To specify the number of system log messages retained in the ASDM log buffer, enter the following
command:
hostname(config)# logging asdm-buffer-size num_of_msgs
Where num_of_msgs specifies the number of system log messages that the adaptive security appliance
retains in the ASDM log buffer.
The following example shows how to set the ASDM log buffer size to 200 system log messages.
hostname(config)# logging asdm-buffer-size 200
Configuring Secure Logging
Note
You must use TCP only. Secure logging does not support UDP; an error occurs if you try to use this
protocol.
To enable secure logging, enter the following command:
hostname(config)#
logging host interface_name syslog_ip [ tcp / port | udp/ port ] [ format emblem ]
[ secure ]
Where the interface_name argument specifies the i nterface on which the syslog server resides, the syslog_ip
argument specifies the IP address of the syslog server, and the port argument specifies the port (TCP or
UDP) that the syslog server listens to for messages.
The tcp keyword specifies that the adaptive security appliance should use TCP to send messages to the
syslog server. The udp keyword specifies that the adaptive security appliance should use UDP to send
messages to the syslog server. The format emblem keyword enables EMBLEM format logging for the
syslog server. The secure keyword specifies that the connection to the remote logging host should use
SSL/TLS for TCP only.
The following example shows how to set up secure logging:
hostname(config)# logging host inside 10.0.0.1 TCP/1500 secure
Clearing the ASDM Log Buffer
To erase the current contents of the ASDM log buffer, enter the following command:
hostname(config)# clear logging asdm