71-13
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 71 Configuring Logging
Configuring Logging
Step 2 Choose the name of the logging destination to which you want to apply a filter. Available logging
destinations are as follows:
• ASDM
• Console port
• E-Mail
• Internal buffer
• SNMP server
• Syslog server
• Telnet or SSH session
Included in this selection are the second column, Syslogs From All Event Classes, and the third column,
Syslogs From Specific Event Classes. The second column lists the severity or the event class to use to
filter messages for the logging destination, or whether logging is disabled for all event classes. The third
column lists the event class to use to filter messages for that logging destination. For more information,
see the “Adding or Editing a Message Class and Severity Filter” section on page 71-14 and the “Adding
or Editing a Syslog Message ID Filter” section on page 71-15.
Step 3 Click Edit to display the Edit Logging Filters dialog box. To apply, edit, or disable filters, see the
“Applying Logging Filters” section on page 71-13.
Applying Logging Filters
To apply filters, perform the following steps:
Step 1 Choose the Filter on severity option to filter syslog messages according to their severity level.
Step 2 Choose the Use event list option to filter syslog messages according to an event list.
Step 3 Choose the Disable logging from all event classes option to disable all logging to the selected
destination.
Step 4 Click New to add a new event list. To add a new event list, see the “Creating a Custom Event List” section
on page 71-15.
Step 5 Choose the event class from the drop-down list. Available event classes change according to the device
mode that you are using.
Step 6 Choose the level of logging messages from the drop-down list. Severity levels include the following:
• Emergency (level 0, system is unusable)
• Alert (level 1, immediate action is needed)
• Critical (level 2, critical conditions)
• Error (level 3, error conditions)
• Warning (level 4, warning conditions)
• Notification (level 5, normal but significant conditions)
• Informational (level 6, informational messages only)
• Debugging (level 7, debugging messages only)
Step 7 Click Add to add the event class and severity level, and then click OK.