User's Manual

Device Management
Log Management
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 305
10
STEP 5 In the Remote Logs area, specify the logs to be saved to a remote syslog server.
• Remote Logs: Click On to save the syslogs to the specified remote syslog
server, or click Off to disable it.
• Syslog Server: Enter the IP address of the remote syslog server that runs a
syslog daemon.
• Severity: Choose the severity level of the logs that you want to save to the
remote syslog server.
For example: If you select Critical, the log messages listed under the Critical,
Emergency, and Alert categories are saved to the remote syslog server.
STEP 6 In the Local Log area, specify the logs to be saved to the local syslog daemon.
• Severity: Choose the severity level of the logs that you want to save to the
local syslog daemon.
For example: If you select Critical, all log messages listed under the Critical,
Emergency, and Alert categories are saved to the local syslog daemon.
STEP 7 Click Save to apply your settings.
Configuring the Log Facilities
A variety of events can be captured and logged for review. These logs can be
saved to the local syslog daemon or to a specified remote syslog server, or be
emailed to a specified email address.
To save the logs that are generated by the log facilities, you first need to enable
the Log feature, set the log buffer size, and specify the Email Alert, Remote Log,
and Local Log settings.
STEP 1 Click Device Management -> Loggings -> Logs Facility.
The Log Facility window opens. The supported log facilities are listed in the table.
STEP 2 Specify the actions for the logs generated by the log facilities:
• Email Alert: Check the box at the left side of the Email Alert heading to
enable the email alert setting for all log facilities, or check the box for a log
facility to enable the email alert settings for the selected log facility.