logs for a specific access-list

cfajardo1_2 · ‎09-07-2008

hello,

is there any way to send logs to a syslog server for only a specific access-list?

thanks

robertson.michael · ‎09-07-2008

Hi Celso,

The only way I can think of to do this would be to set the specific access-list you want to send to your syslog server to level 0 (emergencies). Then, you would log at the emergencies level for your syslog server. Since this level does not generate any syslogs normally, you would only see syslogs generated by your ACL. So, the configuration would look something like this:

access-list permit ip any any log emergencies

logging trap emergencies

logging host inside 10.1.1.1

Other than that, there is no direct way to do this with the logging commands.

Hope that helps.

-Mike