Rate Limits on Syslog

Unanswered Question
Nov 17th, 2008

Hi all

My syslog is being hammered by a lot of useless junk. is the way to deal with this through rate limits? If so what is a sensible number of messages and interval to set?

Thanks

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
martincheung Tue, 11/18/2008 - 04:05

I'd like to log unsuccessful attempts but only once.

So for example I only want one entry for someone trying to ping me rather than every single packet.

Turning off a specific message seems to be global which I'd rather not do if I can avoid it.

Any ideas?

Farrukh Haroon Tue, 11/18/2008 - 06:06

I don't think you can do this on the ASA. You could perhaps send this information to a specialized syslog analyzer (like MARS,manage engine, Sawmill) and then run custom queries/reports.

Regards

Farrukh

Actions

This Discussion