72-6
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 72 Configuring NetFlow Secure Event Logging (NSEL)
Monitoring NSEL
c. To add, edit or delete collectors, or to configure other NetFlow settings (for example, syslog
messages), click Manage to display the Manage NetFlow Collectors dialog box. Click OK to close
the Manage NetFlow Collectors dialog box and return to the Add Flow Event dialog box. For more
information about configuring collectors, see Step 3 of the “Using NetFlow” section on page 72-4.
Step 5 Click OK to close the Add Flow Event dialog box and return to the NetFlow tab.
Step 6 To change flow event entries, select an entry from the list, and click Edit. To remove flow event entries,
select an entry from the list, and click Delete.
Step 7 Click Finish to exit the wizard.
Step 8 To edit a NetFlow service policy rule, perform the following steps:
a. Select it in the Service Policy Rules table, and click Edit.
b. Click the Rule Actions tab, and then click the NetFlow tab.
See the “Monitoring NSEL” section on page 72-6.
Monitoring NSEL
You can use syslog messages to help troubleshoot errors or monitor system usage and performance.You
can view real-time syslog messages that have been saved in the log buffer in a separate window, which
include an explanation of the message, details about the message, and recommended actions to take, if
necessary, to resolve an error. For more information, see the “Using NSEL and Syslog Messages” section
on page 72-2.
To monitor NSEL, see the following pane:
Where to Go Next
To configure the syslog server, see Chapter 71, “Configuring Logging.”
Additional References
For additional information related to implementing NSEL, see the following sections:
• Related Documents, page 72-8
Path Purpose
Tools > Command Line Interface
Type show flow-export counters, then press Send.
Shows runtime counters, including statistical data and error
data, for NSEL.
Tools > Command Line Interface
Type show logging flow-export-syslogs, then press Send.
Lists all syslog messages that are captured by NSEL events.
Tools > Command Line Interface
Type show running-config logging, then press Send.
Shows disabled syslog messages, which are redundant syslog
messages, because they export the same information through
NetFlow.
To Next Page
Loading...
Need help?
General
