Logging of single acl rule on Cisco ASA to syslog server

Hi,

You need the following:

access-list TEST deny ip any any log
logging host interface_name ip_address [tcp[/port] | udp[/port]] [format emblem]
logging trap severity_level
logging facility number

Select allOpen in new window

Thanks Istvan!

The current  logging configuration is this:

logging enable
logging list message106100 level informational
logging list message106100 message 106100
logging asdm informational
logging host inside 10.31.44.3
logging permit-hostdown
logging class session trap warnings
logging class vpn trap notifications
logging class rule-engine trap notifications

I will remove the 'logging class' entries.

All (extended) access-lists a are configured with 'log default' because this is the ASDM default. Must I change this to 'log disable' for alle other access-list lines? So only logging from the desired acl will go to the syslog server and nothing else?

- Jac