Rate Limits on Syslog

Unanswered Question
Nov 17th, 2008
User Badges:

Hi all


My syslog is being hammered by a lot of useless junk. is the way to deal with this through rate limits? If so what is a sensible number of messages and interval to set?


Thanks

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
martincheung Tue, 11/18/2008 - 04:05
User Badges:

I'd like to log unsuccessful attempts but only once.


So for example I only want one entry for someone trying to ping me rather than every single packet.


Turning off a specific message seems to be global which I'd rather not do if I can avoid it.


Any ideas?

Farrukh Haroon Tue, 11/18/2008 - 06:06
User Badges:
  • Red, 2250 points or more

I don't think you can do this on the ASA. You could perhaps send this information to a specialized syslog analyzer (like MARS,manage engine, Sawmill) and then run custom queries/reports.


Regards


Farrukh

Actions

This Discussion