Generating System Log Messages In Emblem Format - Cisco FirePOWER ASA 5500 series Configuration Manual

Configuring and Managing Logs
•
•
•
•
Note If enabled, the device ID does not appear in EMBLEM-formatted system log messages or SNMP traps.
The following example enables the logging device ID for the FWSM:
hostname(config)# logging device-id hostname
The following example enables the logging device ID for a security context on the FWSM:
hostname(config)# logging device-id context-name

Generating System Log Messages in EMBLEM Format

•
•
Disabling a System Log Message
•
•
Cisco Security Appliance Command Line Configuration Guide
42-20
" (double quote)
< (less than)
> (greater than)
? (question mark)
To use the EMBLEM format for system log messages sent to destinations other than a syslog server,
enter the following command:
hostname(config)# logging emblem
To use the EMBLEM format for system log messages sent to a syslog server over UDP, specify the
format emblem option when you configure the syslog server as a n output destination. See the
"Sending System Log Messages to a Syslog Server" section on page 42-7
about syslog servers. Enter the following command:
hostname(config)# logging host interface_name ip_address {tcp[/port] | udp[/port]]
[format emblem]
Where the interface_name and IP_address specifies the syslog server to receive the system log
messages, tcp[/port] and udp[/port] indicate the protocol and port that should be used, and
format emblem enables EMBLEM formatting for messages sent to the syslog server.
The Cisco ASA can send system log messages using either the UDP or TCP protocol; however, you
can enable the EMBLEM format only for messages sent over UDP. The default protocol and port
are UDP/514.
For example:
hostname(config)# logging host interface_1 122.243.006.123 udp format emblem
To prevent the security appliance from generating a particular system log message, enter the
following command:
hostname(config)# no logging message message_number
For example:
hostname(config)# no logging message 113019
To reenable a disabled system log message, enter the following command:
hostname(config)# logging message message_number
Chapter 42 Monitoring the Security Appliance
for more information
OL-10088-01