Cisco ASA – Configure Log Format

ciscocisco-asacisco-commandscisco-ioslogging

The logs from CISCO ASA fierwall is currently in the following format.

%ASA-message_class-severity-messageID

e.g.
   "%ASA-session-6-....."

I want to remove messsage class from logs

%ASA-severity-messageID

e.g.
   "%ASA-6-....."

I checked in internet and cicso configue help guide, then tried the commands

   no logging class session

But still coming the logs with message class. Please help me

   no logging emblem

Is this work?

Which is the actual command for that?

Thanks in advance.

Best Answer

Thanks for the comments and answers. I got the correct answer today. the first message is of emblem format and second one is default format.

We can go back to default format by using the following command

no logging emblem

For more details look here

Related Solutions

Fortigate Logging: Prevent Ping to Firewall Interface While Logging Implicitly Denied Traffic

For Fortigate firewalls running FortiOS 5.0 or newer, it is possible to use the CLI to specifically disable logs for accepted traffic directed to the firewall itself:

Log on to firewall using SSH, then run the following commands (assuming the firewall has a VDOM named 'root')

config vdom
edit root
config log settings
set local-in-allow disable

This has to be done on a per VDOM basis.

Once this is done, the firewall keeps logging all denied traffic, without logging accepted pings, SNMP monitoring queries etc.

Fortinet has more informationg here: http://docs-legacy.fortinet.com/fgt/handbook/cli_html/index.html#page/FortiOS%25205.0%2520CLI/config_log.17.13.html

For Fortigate firewalls running FortiOS older than 5.0, I suppose the best advice is to upgrade to 5.0 or newer and then apply the setting suggested above. It seems like the feature 'set local-in-allow disable' is not available before FortiOS 5.0.

Cisco – Spanning-Tree debug logs C7600

The RSP720 in the router has two processing engines. The route processor (RP) and the switch processor (SP).

When you log-in to the console/telnet/ssh on a 7600 that's running IOS on both the RP and the SP (Native mode), you log-in to the RP by default. The spanning-tree function is however performed by the SP.

After logging into the box try:

term mon
remote command switch debug spanning-tree bpdu receive

You should see some output. The debug must also be turned off using the remote command switch command.

Best Answer

Related Solutions

Fortigate Logging: Prevent Ping to Firewall Interface While Logging Implicitly Denied Traffic

Cisco – Spanning-Tree debug logs C7600

Related Topic