cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
290
Views
0
Helpful
1
Replies

syslog resumption

rahmant
Level 1
Level 1

I have a bunch of Cisco ASA unit's all sending tcp based syslog data to a central Kiwi Syslog server. I have the units configured to continue functioning after syslog communications failure.

We have patches applied on a regular basis and when the Syslog server is patched/rebooted, it seems that all my firewalls stop sending syslog data b/c of the server boot.

Is there some way to automatically kickstart the ASA's to resume logging? Right now I have to manually reconfigure each ASA unit to restore syslog data transmission.

Running 8.0(3) and ASDM 6.1.1 on a variety of 5510's, 5520's and 5540's.

Thanks,

Tariq

1 Reply 1

torchris
Level 1
Level 1

Please try to set up the captures between the ASA and the server then when you reboot the unit enable the logs on the firewall to verify what error do you get also, the capture will let you know at what time the ASA stopped sending the syslog messages.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: