Customizing The Log Configuration; Configuring The Logging Queue; Including The Date And Time In Syslog Messages - Cisco 7604 Configuration Manual

Chapter 25 Monitoring the Firewall Services Module
The preceding example states that syslog messages that match the criteria specified will be sent to the
output destination. The specified criteria for syslog messages to be included in the list are:
•
•
•
A syslog message is logged if it satisfies any of these conditions. If a syslog message satisfies more than
one of the conditions, the message is logged only once.

Customizing the Log Configuration

This section describes other options for fine tuning the logging configuration. It includes the following
topics:
•
•
•
•
•
•
•

Configuring the Logging Queue

The FWSM has a fixed number of blocks in memory that can be allocated for buffering syslog messages
while they are waiting to be sent to the configured output destination. The number of blocks required
depends on the length of the syslog message queue and the number of syslog servers specified.
To specify the number of syslog messages the FWSM can hold in its queue before sending them to the
configured output destination, enter the following command:
hostname(config)# logging queue message_count
where the message_count variable specifies the number of syslog messages that can remain in the syslog
message queue while awaiting processing. The default is 512 syslog messages. A setting of 0 (zero)
indicates unlimited syslog messages, that is, the queue size is limited only by block memory availability.
To view the queue and queue statistics, enter the following command:
hostname(config)# show logging queue

Including the Date and Time in Syslog Messages

To specify that syslog messages should include the date and time that the syslog messages was generated,
enter the following command:
hostname(config)# logging timestamp
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Syslog message IDs that fall in the range of 104024 to 105999
All syslog messages with the level of critical or higher (emergency, alert, or critical)
All ha class syslog messages with a severity level of warning or higher (emergency, alert, critical,
error, or warning)
Configuring the Logging Queue, page 25-15
Including the Date and Time in Syslog Messages, page 25-15
Including the Device ID in Syslog Messages, page 25-16
Generating Syslog Messages in EMBLEM Format, page 25-16
Disabling a Syslog Message, page 25-17
Changing the Severity Level of a Syslog Message, page 25-17
Changing the Amount of Internal Flash Memory Available for Syslog Messages, page 25-18
Configuring and Managing Syslog Messages
25-15