Cisco asa 5520 8.4 (IV )-

Change the default message level-record user logon

Step 1: Find the user logon event ID:

Hostname (config) # show log | include admin

Dec 03 2009 17: 32: 35: % ASA-6-605005: Login permitted from 192.168.202.51/3507 to inside: 192.168.2.20/ssh for user "admin"

Step 2: locate the log level of the current Message ID 605005

Hostname (config) # show logging message 605005

Syslogs 605005: default-level informational (enabled)

Step 3: change the message ID 605005 level from information to warnings

Hostname (config) # logging message 605005 level warnings

Step 4: Verify the new Log Level

Hostname (config) # show logging message 605005

Syslogs 605005: default-level informational, current-level warnings (enabled)

This article is from the "Fengyun blog". For more information, contact the author!