42-20
Cisco Security Appliance Command Line Configuration Guide
OL-10088-01
Chapter 42 Monitoring the Security Appliance
Configuring and Managing Logs
• " (double quote)
• < (less than)
• > (greater than)
• ? (question mark)
Note If enabled, the device ID does not appear in EMBLEM-formatted system log messages or SNMP traps.
The following example enables the logging device ID for the FWSM:
hostname(config)# logging device-id hostname
The following example enables the logging device ID for a security context on the FWSM:
hostname(config)# logging device-id context-name
Generating System Log Messages in EMBLEM Format
• To use the EMBLEM format for system log messages sent to destinations other than a syslog server,
enter the following command:
hostname(config)# logging emblem
• To use the EMBLEM format for system log messages sent to a syslog server over UDP, specify the
format emblem option when you configure the syslog server as a n output destination. See the
“Sending System Log Messages to a Syslog Server” section on page 42-7 for more information
about syslog servers. Enter the following command:
hostname(config)# logging host interface_name ip_address {tcp[/port]|udp[/port]]
[format emblem]
Where the interface_name and IP_address specifies the syslog server to receive the system log
messages, tcp[/port]andudp[/port] indicate the protocol and port that should be used, and
format emblem enables EMBLEM formatting for messages sent to the syslog server.
The Cisco ASA can send system log messages using either the UDP or TCP protocol; however, you
can enable the EMBLEM format only for messages sent over UDP. The default protocol and port
are UDP/514.
For example:
hostname(config)# logging host interface_1 122.243.006.123 udp format emblem
Disabling a System Log Message
• To prevent the security appliance from generating a particular system log message, enter the
following command:
hostname(config)# no logging message message_number
For example:
hostname(config)# no logging message 113019
• To reenable a disabled system log message, enter the following command:
hostname(config)# logging message message_number