Firewall Logging Slow: log event after 3-4 minutes

[t4tauseef33]

Hi,

I have ASA 5520 and it logging the events very slow & late. Previously 2-3 months ago it was working fine and it log the events very quickly as soon as it got event but now its very late. CPU and memory usage is low as previously. Any thing that can increase the speed of logging on cisco asa firewall.

Thanks

[David Inabinet]

I've seen this before with the firewalls I manage. I've found several conditions can cause this behavior.

The first is if you have multiple destinations defined and they are logging at a high level (debugging, etc.). I disable destinations that I'm not currently using.

Another reason why I've seen this is if your syslog server is overwhelmed or the duplex setting is incorrect on the interfacing receiving the syslog messages. This one isn't as likely though.

Hope that helps.