ASA 5510 Syslogs

I am looking for a product that can be used with our syslogs to create a report that will show login/logoff attempts to our Cisco ASA5510 using AnyConnect client.  The Cisco syslogs are very hard to work with and give too much raw information we would like to be able to easliy create this report - and others.  Even some of the log programs are not easy to setup and get working.  Could anyone recommend a product?  I would also like to be able to monitor network bandwidth and other network traffic, but would be happy with one that could just handle our VPN need .  

Thank You
Who is Participating?
MikeKaneConnect With a Mentor Commented:
HAve a look at SawMill:

Very good at creating reports from syslog.
SaineolaiConnect With a Mentor Commented:
Firegen is also an option, I haven't used it in a couple of years though

gavvingConnect With a Mentor Commented:
Another option is use something like Kiwi Syslog (from solarwinds) and build a filter rule that dumps the syslog entry that has the username.  In my case it was something like:
"%ASA-6-713228: Group = vpngroupname"
Have that output to a specific file and you'd have a log of just the logins.  

Also another route is to use the Radius/TACACS authentication log as your access log.  Microsoft IAS server will log to a text file and/or the Windows Event viewer.  And Cisco ACS logs everything to a report that's pretty easy to access and print.

alexjfisherConnect With a Mentor Commented:
Have you considered splunk?

There's a free version, but you might need the paid for version if you want reports automatically emailed to you.  Be sure to check out the cisco addons for it.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.