76-5
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 76 Configuring Logging
Licensing Requirements for Logging
time, click the headers of the other column(s) that you want to include in the sort order. To sort messages
chronologically, select both the date and time columns; otherwise, the messages are sorted only by date
(regardless of the time) or only by time (regardless of the date).
When you sort messages in the Real-Time Log Viewer and in the Latest ASDM Syslog Events Viewer,
the new messages that come in appear in the sorted order, instead of at the top, as they normally would
be. That is, they are mixed in with the rest of the messages.
Using Custom Message Lists
Creating a custom message list is a flexible way to exercise control over which syslog messages are sent
to which output destination. In a custom syslog message list, you specify groups of syslog messages
using any or all of the following criteria: severity level, message IDs, ranges of syslog message IDs, or
message class.
For example, you can use message lists to do the following:
• Select syslog messages with the severity levels of 1 and 2 and send them to one or more e-mail
addresses.
• Select all syslog messages associated with a message class (such as ha) and save them to the internal
buffer.
A message list can include multiple criteria for selecting messages. However, you must add each
message selection criterion with a new command entry. It is possible to create a message list that
includes overlapping message selection criteria. If two criteria in a message list select the same message,
the message is logged only once.
Licensing Requirements for Logging
The following table shows the licensing requirements for this feature:
Prerequisites for Logging
Logging has the following prerequisites:
• The syslog server must run a server program called syslogd. Windows (except for Windows 95 and
Windows 98) provides a syslog server as part of its operating system. For Windows 95 and Windows
98, you must obtain a syslogd server from another vendor.
• To view logs generated by the ASA, you must specify a logging output destination. If you enable
logging without specifying a logging output destination, the ASA generates messages but does not
save them to a location from which you can view them. You must specify each different logging
output destination separately. For example, to designate more than one syslog server as an output
destination, specify separate entries in the Syslog Server pane for each syslog server.
Model License Requirement
All models Base License.