PIX/ASA disable "name" lookup in syslog.

[ckeladis]

Is it possible to disable "name" lookups for PIX/ASA syslogs?

The PIX/ASAs seem to be converting certain fields in the syslog, from IPs to hostnames that are defined locally on the PIX/ASA.

Is there any way to disable this resolution specifically for syslog's, as it's confusing my SIEM?

I've had a look around but cant find a way to disable this (other than dropping the local hostname definition entirely which will impact rule readibility).

Is there any way to acheive this?

Thanks!

[Julio Carvajal]

Hello Chris,

The only way would be to disable the local name database configured on the Pix/ASA with the command:

     -No names

But it will affect all the other features that use the name database.

Regards,

Do please rate helpful posts

Julio