ā03-07-2014 04:12 PM - edited ā03-11-2019 08:54 PM
I like to capture the syslogs to either the option of installing a 100GB SSD drive, or USB, what would be the best route?
Solved! Go to Solution.
ā03-12-2014 09:03 PM
Yes- if configured, you will still have the internal syslog. It is limited per the reference to a relatively small size.
If you're logging at anything higher that level 4 you will usually start wrapping the internal syslog buffer after a very short while so it is of limited utility. More for near-real-time troubleshooting than for foresnic analysis.
ā03-09-2014 08:35 PM
I don't believe either option is supported for ASA syslog messages.
The SSD drive is intended for exclusive use of the NGFW features. A device in the USB port is available for file transfers or as a potential storage location for boot, ASDM etc. as well as a means of transferring files onto the ASA.
The internal log buffer storage is in memory and, when you choose internal log, is not customizable - it goes to flash memory. Reference.
ā03-12-2014 12:41 PM
ā03-12-2014 09:03 PM
Yes- if configured, you will still have the internal syslog. It is limited per the reference to a relatively small size.
If you're logging at anything higher that level 4 you will usually start wrapping the internal syslog buffer after a very short while so it is of limited utility. More for near-real-time troubleshooting than for foresnic analysis.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: