cisco asa 5520 8.4 (四) -- 改變默認消息的級別

改變默認消息的級別--記錄用戶登陸

Step 1: 找到用戶登陸的事件ID:

hostname(config)#show log | include admin

Dec 03 2009 17:32:35: %ASA-6-605005: Login permitted from 192.168.202.51/3507 to inside:192.168.2.20/ssh for user "admin"

Step 2: 找到當前消息ID 605005的日誌級別

hostname(config)#show logging message 605005

syslog 605005: default-level informational (enabled)

Step 3: 把消息ID 605005的級別從information改到warnings

hostname(config)#logging message 605005 level warnings

Step 4: 校驗新的日誌級別

hostname(config)#show logging message 605005

syslog 605005: default-level informational, current-level warnings (enabled)