Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

ASA log exception

Hi,

How can i except log generation some ip address on ASA.

I want to filter for generation syslog message for spesific IP address on ASA.

Thanks.

2 REPLIES
Community Member

ASA log exception

Do you have any idea this case?

Thanks.

Community Member

ASA log exception

yes you can capture for a perticular host and ip

you have to define access-list for that

as instance if you want capture icmp logfor the host 192.168.2.115

then

first make a access-list

access-list 101 permit  icmp host 192.168.2.115 any

then

you have too attach this access-list with capture commend

capture (capture name like newcap) newcap access-list 101 interface (interface name like inside,outside,or dmz1) inside

then the commend is

capture newcap access-list 101 interface inside

then if you ping your inside interface then asa will capture this log

then you can see the log by sh capture (capture name)

sh capture newcap

tell us if it is help you

218
Views
0
Helpful
2
Replies
CreatePlease to create content