Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSA Rule Fire - stopping it from logging

I have a rule in CSA that I want to stop the logging of the rule fire. I unchecked the logging of the event and generated rules.

It is still logging.

So with the 'Log' check box unchecked how do I stop it from logging? I want the rule to fire, just not log.

Larry

3 REPLIES
Blue

Re: CSA Rule Fire - stopping it from logging

Hi Larry, what enforce action is the rule?

Do you have "Take precedence over other rules" checked?

Do you have any log overrides checked for the group?

Tom

New Member

Re: CSA Rule Fire - stopping it from logging

Tom, that is also uncheck. But I did find at the 'Group' level where this policy in the 'Rule Overides' that the 'Log Deny Actions' was checked.

So I unchecked that and generated rules.

The event that will cause the rule fire will happen in the next 30 minutes so it's a wait and see game.

Thanks for the quick reply.

Blue

Re: CSA Rule Fire - stopping it from logging

That might do it... good luck.

Tom

115
Views
5
Helpful
3
Replies
CreatePlease login to create content