Cisco PIX 500 Series Configuration Manual page 950

Configuring and Managing Logs
Changing the Log Buffer Size
By default, the log buffer size is 4 KB. To change the size of the log buffer, enter the following command:
hostname(config)# logging buffer-size bytes
Where the bytes argument sets the amount of memory used for the log buffer, in bytes. For example, if
you specify 8192, the adaptive security appliance uses 8 KB of memory for the log buffer.
The following example specifies that the adaptive security appliance uses 16 KB of memory for the log
buffer:
hostname(config)# logging buffer-size 16384
Automatically Saving the Full Log Buffer to Flash Memory
Unless configured otherwise, the adaptive security appliance address messages to the log buffer on a
continuing basis, overwriting old messages when the buffer is full. If you want to keep a history of logs,
you can configure the adaptive security appliance to send the buffer contents to another output location
each time the buffer fills. Buffer contents can be saved either to internal Flash memory or to an FTP
server.
When saving the buffer content to another location, the adaptive security appliance creates log files with
names that use a default time-stamp format, as follows:
LOG-YYYY-MM-DD-HHMMSS.TXT
where YYYY is the year, MM is the month, DD is the day of the month, and HHMMSS is the time in hours,
minutes, and seconds.
While the adaptive security appliance writes the log buffer contents to internal Flash memory or an FTP
server, the adaptive security appliance continues saving new messages to the log buffer.
To specify that messages in the log buffer should be saved to internal Flash memory each time the buffer
wraps, enter the following command:
hostname(config)# logging flash-bufferwrap
Automatically Saving the Full Log Buffer to an FTP Server
See the
information about saving the buffer.
To specify that messages in the log buffer should be saved to an FTP server each time the buffer wraps,
perform the following steps.
To enable the adaptive security appliance to send the log buffer contents to an FTP server every time the
Step 1
buffer wraps, enter the following command:
hostname(config)# logging ftp-bufferwrap
To identify the FTP server, entering the following command:
Step 2
hostname(config)# logging ftp-server server path username password
Where the server argument specifies the IP address of the external FTP server
Cisco Security Appliance Command Line Configuration Guide
42-14
"Saving the Current Contents of the Log Buffer to Internal Flash Memory"
Chapter 42 Monitoring the Security Appliance
section for more
OL-12172-03