
9-34
Cisco PIX Firewall and VPN Configuration Guide
78-15033-01
Chapter 9 Accessing and Monitoring PIX Firewall
Using Syslog
Replace syslogid with the numeric identifier assigned to the syslog message. Replace levelid with one
of the following numeric or text identifiers for the syslog level:
• 0—emergencies—System unusable messages
• 1—alerts—Take immediate action
• 2—critical—Critical condition
• 3—errors—Error message
• 4—warnings—Warning message
• 5—notifications—Normal but significant condition
• 6—informational—Information message
• 7—debugging—Debug messages and log FTP commands and WWW URLs
For example, if you want to log the message “denied by ACL” (106023), but you do not want to increase
the overall logging level, you can change the specific syslog level to Critical, as shown in the following
command:
pix(config)# logging message 106023 level critical
To restore the default syslog level for a specific message, precede the command with no. To restore all
of the currently changed syslog messages to their default levels, enter the following command:
pix(config)# clear logging level
By default, the emergencies level is not used for any PIX Firewall syslog messages, so you can use this
level to restrict syslog messages to those in which you are interested. To do this, change the level of
interesting messages to emergencies.
Disabling Syslog Messages
To disable a particular syslog message, enter the following command:
no logging message messageid
To reenable a specific message, enter the following command:
logging message messageid
To reenable all disabled messages, enter the following command:
clear logging disabled
Viewing Modified Message Levels
To view all messages with modified levels, enter the following command:
show logging level
To view the status of a particular message, enter the following command:
show logging message syslogid
Kommentare zu diesen Handbüchern