Linux

Ask something
Discussion Locked

Cisco PIX logging

0 helpful
3 replies

by acrawford

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have read up on the basics of using syslog and logrotate to log and rotate my system logs. I have also read the basics of how to make the Cisco PIX send logging information to my syslog server. When turning this on from the PIX, it immediately starts logging to the syslog server (I've already enabled the remote logging ability for syslog) but it logs everything to /var/log/messages.

My problem/question is that I'd like to have the PIX logs in a separate file, one that gets rotated daily at midnight. In addition to that, I'd like it to append the date as the suffix of the log's filename, such as PIX20020815. I would also prefer that the logs were automatically deleted after say, 3 months.

If anyone can give me details on this, or if anyone else has already set this up for their PIX, I'd greatly appreciate some examples.

3 replies

by alveden

I am not familiar with Cisco PIX ... but I believe there is an option to configure a syslog facility within the box. For example you can set the syslog facility to "cisco".

Within the linux box, vi the /etc/syslog.conf and enter this in a new line.

cisco.* /var/log/cisco.log

You will need to restart syslogd, and also set up the logrotate to rotate cisco.log.

This discussion is closed to new replies.