Solved: ASA Logging

GREG HARPER · ‎04-01-2010

Does the ASA keep logs of SSL connections? If so, can I get history detail and go back as far as 2009?

What about remote access user detail?

Also, I’d like to automate the delivery of that logging information into Splunk. What options do I have?

Thanks,

GLH

trippi · ‎04-02-2010

Greg,

Don't forget to give Federico a good vote

Federico Coto Fajardo · ‎04-03-2010

Hello Greg,

In this case or any other case if you find the answer helpful, you can rate the answer by marking the question as correct.

This will also allow everybody else to know the resolution for this particular issue.

Thank you,

Federico.

Federico Coto Fajardo · ‎04-01-2010

Hi,

The ASA keeps logs of remote access connections.

You can't go back to 2009 unless you keep a syslog server with the log files.

The ASA by default log to its console, you can check them via a terminal session as well.

The ASA can log to its buffer, but there's a limit to the amount of logs, and the ASA will just re-write the old logs with the new ones.

Take a look at this link:

Federico.

GREG HARPER · ‎04-02-2010

Thanks Federico for the link and the information. This helps a bunch!

glh

trippi · ‎04-02-2010

Greg,

Don't forget to give Federico a good vote

GREG HARPER · ‎04-03-2010

Trippi -

Here is a dumb question how do I give him a vote? I logged in and couldn't

find where to vote.

Thanks,

Greg

Federico Coto Fajardo · ‎04-03-2010

Hello Greg,

In this case or any other case if you find the answer helpful, you can rate the answer by marking the question as correct.

This will also allow everybody else to know the resolution for this particular issue.

Thank you,

Federico.

GREG HARPER · ‎04-03-2010

Got it thanks.