Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

ASA Logging

Does the ASA keep logs of SSL connections? If so, can I get history detail and go back as far as 2009?

What about remote access user detail?

Also, I’d like to automate the delivery of that logging  information into Splunk. What options do I have?

Thanks,

GLH

2 ACCEPTED SOLUTIONS

Accepted Solutions
Community Member

Re: ASA Logging

Greg,

Don't forget to give Federico a good vote

Re: ASA Logging

Hello Greg,

In this case or any other case if you find the answer helpful, you can rate the answer by marking the question as correct.

This will also allow everybody else to know the resolution for this particular issue.

Thank you,

Federico.

6 REPLIES

Re: ASA Logging

Hi,

The ASA keeps logs of remote access connections.

You can't go back to 2009 unless you keep a syslog server with the log files.

The ASA by default log to its console, you can check them via a terminal session as well.

The ASA can log to its buffer, but there's a limit to the amount of logs, and the ASA will just re-write the old logs with the new ones.

Take a look at this link:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/monitor_syslog.html

Federico.

Community Member

Re: ASA Logging

Thanks Federico for the link and the information.  This helps a bunch!

glh

Community Member

Re: ASA Logging

Greg,

Don't forget to give Federico a good vote

Community Member

Re: ASA Logging

Trippi -

Here is a dumb question how do I give him a vote? I logged in and couldn't

find where to vote.

Thanks,

Greg

Re: ASA Logging

Hello Greg,

In this case or any other case if you find the answer helpful, you can rate the answer by marking the question as correct.

This will also allow everybody else to know the resolution for this particular issue.

Thank you,

Federico.

Community Member

Re: ASA Logging

Got it thanks.

355
Views
15
Helpful
6
Replies
CreatePlease to create content