1-5
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Logging
Licensing Requirements for Logging
• Select syslog messages with the severity levels of 1 and 2 and send them to one or more e-mail
addresses.
• Select all syslog messages associated with a message class (such as ha) and save them to the internal
buffer.
A message list can include multiple criteria for selecting messages. However, you must add each
message selection criterion with a new command entry. It is possible to create a message list that
includes overlapping message selection criteria. If two criteria in a message list select the same message,
the message is logged only once.
Using Clustering
Syslog messages are an invaluable tool for accounting, monitoring, and troubleshooting in a clustering
environment. Each ASA unit in the cluster (up to eight units are allowed) generates syslog messages
independently; certain logging commands then enable you to control header fields, which include a
timestamp and device ID. The syslog server uses the device ID to identify the syslog generator. You can
use the logging device-id command to generate syslog messages with identical or different device IDs
to make messages appear to come from the same or different units in the cluster.
Licensing Requirements for Logging
The following table shows the licensing requirements for this feature:
Prerequisites for Logging
Logging has the following prerequisites:
• The syslog server must run a server program called syslogd. Windows (except for Windows 95 and
Windows 98) provides a syslog server as part of its operating system. For Windows 95 and Windows
98, you must obtain a syslogd server from another vendor.
• To view logs generated by the ASA or ASASM, you must specify a logging output destination. If
you enable logging without specifying a logging output destination, the ASA and ASASM generate
messages but does not save them to a location from which you can view them. You must specify each
different logging output destination separately. For example, to designate more than one syslog
server as an output destination, enter a new command for each syslog server.
Guidelines and Limitations
This section includes the guidelines and limitations for this feature.
Context Mode Guidelines
Supported in single and multiple context modes.
Model License Requirement
All models Base License.