Problem with Real Time Log Viewer on ASA!!!

rodrigo.antunes · ‎02-09-2009

Friends,

I'm having a seriou problema on ASDM. When I open ASDM, the Real Time Log Viewer pane opens and starts to show the events (logs). Suddenly, it stops. I thought that after some seconds it would refresh the events because the tool name is "REAL TIME Log Viewer", but it didn't occur.

The only way to make return is close e open ASDM again. I updated ASDM already but the problem continues.

Someone with a suggestion???

Erik Ingeberg · ‎05-25-2009

I am having exaclty the same problem on my ASA 5505.

The problem started when I upgraded to ASA 8.2(1) and ASDM 6.2(1). This is very annoying, I hope it will get fixed in an update.

BrinksArgentina · ‎05-25-2009

You can try updating java.

http://java.com/en/download/index.jsp

Erik Ingeberg · ‎05-25-2009

I'm using newest Java: Version 6 Update 13.

lus · ‎08-11-2009

I have exactly the same problem. But only with ASA's 8.2.1 and the newest ASDM release.

Somebody has a solution?

Thanks

mesic.almir · ‎08-12-2009

It seems you are hitting this bug: CSCsm11264, here is the explanation of the bug:

When long url triggers syslog 304001 ASA stops sending syslogs to ASDM

Symptom:

When viewing syslogs generated by the firewall from within ASDM, the syslogs might stop being logged.

This will continually happen until you disable the 304001 syslogs.

Conditions:

The ASA must be running at least version 8, and must be configured for either http inspection, or url filtering with an external url server.

Workaround:

The problem seems to be triggered by the syslog 304001 and 304002 which displays the URL that a user accesses. By disabling logging of this syslog, the problem can be mitigated. The command to do this is:

ASA(config)#no logging message 304001

ASA(config)#no logging message 304002

Related Bug Information

CSCsm99532

RTlog viewer is hanging when websense log messages are seen

Symptom: Real time log viewer stops displaying new messages. Conditions: - websense is configured and active. - syslog messages 304002 and 304001 are generated. - Some form of timing as this is not happening 100% of the time. Workaround: disable log message 304002 and 304001.

Here is all the information about the bug: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsm11264

lus · ‎08-12-2009

Hello

Thanks, this was exactly my problem.