I have the following configured on my ASA presently
logging buffered debugging
logging trap debugging
logging device-id hostname
logging host Inside 10.X.X.X format emblem
Output from "show logging"
Syslog logging: enabled
Timestamp logging: enabled
Standby logging: disabled
Debug-trace logging: disabled
Console logging: disabled
Monitor logging: disabled
Buffer logging: level debugging, 71625 messages logged
Trap logging: level debugging, facility 20, 58930 messages logged
Logging to Inside 10.X.X.X (EMBLEM format)
History logging: disabled
I have an ACE in place:
access-list OUTSIDE extended deny ip any any log errors
I am seeing hits on this ACE, but I am not seeing any deny logs in my buffer or syslog server.
access-list OUTSIDE line 66 extended deny ip any any log errors interval 300 (hitcnt=34)
I figure I must be missing something very obvious?