cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
449
Views
10
Helpful
4
Replies

Logging ASA 5520 to CS-MARS

ttrevino1
Level 1
Level 1

Can someone assist me in getting the logging to work to the MARS box? I have logging to the MARS IP in the config of the ASA, but I don't know where to look in the MARS for the log files?

4 Replies 4

acomiskey
Level 10
Level 10

You can review the syslogs in the Mars under Admin -> System Maintenance -> Retrieve Raw Messages.

Thanks for the advice. When I go here, and select a date range, 1 day, I get the message to "click here to download". When I do, it asks whether I want to open it or save it. Selecting either option, I get a pop-up from Winzip that says "Invalid archive directory".

Any suggestions?

I believe it is a gzip file...download and use winrar instead of winzip, that will do the trick.

http://www.rarlab.com/

Please rate if it helps.

That was it, thanks!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: