Configuration Changes logging issue, ASDM related?

I've run into an interesting problem.
ASA: 8.4(2)
ASDM: 6.4(5)
When I make a change at the CLI, syslog message ASA-5-111008 is generated and sent to the syslog servers, local buffer, and ASDM.
When I make a change in ASDM, syslog message ASA-5-111008 is  generated and sent to the local  buffer and ASDM. It is NOT sent to the syslog server.
Here's my logging config...
Firewall# sh run logging
logging enable
logging timestamp
logging standby
logging buffer-size 409600
logging buffered informational
logging trap notifications
logging asdm notifications
logging host Inside xx.xx.xx.AA 6/1468
logging host Inside xx.xx.xx.BB 6/1468
logging flash-minimum-free 10240
logging flash-maximum-allocation 10240
logging permit-hostdown
Surely I'm missing something obvious.  Is this a known bug?
Thanks!

Ha, I did upgrade just a few minutes ago, but same result.
That does look similar, and so does ...
CSCth14248 ASA not sending all logging messages via TCP logging
Looks like I'll need to upgrade to 8.4(3) to fix these and see how it goes.
thanks!

Similar Messages

  • Configuration Change log in Production

    Hi all
        Some configuration changes have been directly made in production at our client. How can we find out what changes are made? Going into SCC4 > Change logs, I could find out who made all the changes. But it does not show what configuration changes are made.
    Thanks
    Vamsi

    Dear Vamsi,
    I'm not sure whether in a single report you can fetch all the changes related to configuration for a particular module.
    But I'm sure in most of the nodes the configuration change logs gets recorded.Check these links,
    Re: How to find when a new Material type is created
    Configuration change Log
    Regards
    Mangalraj.S

  • Configuration change Log

    Hi,
      I need to find the configuration change log in development system. Do we have any transaction/report/program from which we can track all the configuration changes for a perticular object.
    Thanks,
    Vijay

    for almost all customizing you can find the change history in menu tools within the cuistomizing.

  • Change Log issues - Post Upgrade

    Hi Experts,
    We are in the process of Upgrading BW from 3.X to BI 7. As part of this we copied our existing Production system into the sand box and basis did the technical upgrade on the same (Sand Box). Later we ran some post upgrade Jobs as part of the SAP defined Upgrade Process.
    1) But after the upgrade i can notice that most of the ODS objects, doesn't have 'Change Log' table in the 'Information (Log/Status)' screen.
    2) Even when i try to view the change log content in Manage screen, it gives me a pop up to enter the change log table, instead of directly taking me to the selection screen.
    3) When i try to activate a request, even that fails with an SQL error 'SAPSQL_EMPTY_TABNAME'.
    Is there any process that has to be run to link the Older version change log tables to the corresponding ODSs after Upgrade?
    Has anyone come accross similar issues? If yes, how was it solved? All suggestions are invited.
    Thanks and Regards,
    Jay

    HI JayaPrasad,
    Chek the note : 1059171 which is related to Change log,
    I too faced this issue when upgraded to Bi7.0 on SP12, but as soon as SP13 is installed the issue is solved, so I suggest to go for SP 13 for upgrading to Bi7.0.
    Regards,
    Srinivas

  • RPUAUD00 Change Log Issue on Table T585B

    I added some new infotypes to the RPUAUD00 change log on tables:
    t585a
    t585b
    t585c
    Everything seems to be working as expected, but I received soft errors on t585b:
    "! All data fields 0006 01 will be deleted"
    when I used * (all fields).
    This did not happen when I used actual field names.
    Does anyone know what that means?
    thanks!

    It's just a warning for this specific view if you put '*' in field name. What it means is that if you currently configure audit changes
    for specific fields of this infotype, all of these entries will automatically be deleted by SAP when you use '*' (all fields are marked for audit). Therefore, there should not be a concern on the message.

  • Change log issues-2 images for a single requests

    Hi ,
    in change log table for a single request i found 2 before images and two after images, is this normal behaviour if not when can we see the such type of scenarios.
    because it leads to zero records when it isn updated in to the further data targets.
    thanks.

    the listener is NOT involved with any existing session.
    stopping & restarting the listener has NO impact on existing sessions.
    I suggest it is better to control network access to any system using a Firewall which is the best tool for this task.
    Yes, it is possible to have more than 1 listener. It is also possible to poke yourself in the eye with a sharp pencil.
    I suggest that you should avoid both of these possible activities.
    Simply put having multiple listeners is wrong for multiple reasons & should be avoided.

  • Configuration change logs with EEM

    Hi,
    I am trying to log all commands executed on the Cisco Router. And it is working fine. However it wont show who executed the commands. It just shows command was executed
    *Nov 15 00:38:56.356: %HA_EM-6-LOG: cli-match: configure terminal  Command Executed
    *Nov 15 00:39:08.060: %HA_EM-6-LOG: cli-match: do-exec sh ip int brief Command Executed
    *Nov 15 00:39:08.066: %HA_EM-6-LOG: cli-match: show ip interface brief  Command Executed
    PE4(config)#    
    *Nov 15 00:39:12.940: %HA_EM-6-LOG: cli-match: do-exec sh logg Command Executed
    *Nov 15 00:39:12.945: %HA_EM-6-LOG: cli-match: show logging  Command Executed
    I know i can setup using config archive logging for the config change. but my requirement is for show command as well. We use radius for authentication and it is not doing command authorisation and accounting..
    If any one know what I can append in so that it can show who executed the command.
    thanks
    Aijaz

    The CLI command I'm trying to run is "copy runnning-config tftp", but I don't know how to pass variable on the ASA. I know some Cisco IOS you can create environment variable for the EEM to use. The command I'm trying to run requires user input such as: the source file, destination tftp client and the destination file. How to pass that? Or maybe what command can I run to save the config to a remote server?
    thanks,

  • Change log issue in BRF process workflow SRM 7.0

    Hi Experts,
    I am new to SRM workflow. At the moment I have a requirement in SRM 7.0 BRF process control workflow.My requirement is to capture the changes done by the shopping cart approver's and also the changes done by shopping cart requestor. Below is an exmaple.
    In some cases the first level approver or second level approver will edit the shopping cart , make some changes and will resend the same shopping cart to the requestor (the person who created the shopping cart). If the requestor accepts the same changes and save the shopping cart there is no need of sending the workitem to the first level approval or second level approver again, but incase if the requestor makes new changes to the shopping cart then the workitem should go to the first level approval or the second level approver.
    How will the system identify the changes done by the first level approver or second level approver or the requestor?? Because based on the changes the workflow process will follow. Is there any log where the changes done by first level approver or second level approver are saved? and please let me know where to code for this requirement.
    Thanks and Regards,
    Prashanth

    Note 868192 - Consulting solution: MM-SRV-SUS service procurement
    A service entry in SUS is transferred to the R/3 system or ERP system using an IDoc after you submit the entry screen. Service entry sheets are created there and they are then available for release. You can perform the service entry in a number of ways:
    Service entry of planned services: you can confirm planned services in the service entry in SUS. An overdelivery may occur if quantities are still open.
    Service entry using time recording: planned services, for which a time recording is useful, can be split up. Time recording by the hour or by the day is possible.
    Service entry for limits: You can use the free-text entry of new items and also the OCI-enabled catalogs to implement limits.
    verena.kahnert at sap dot com

  • Logging CRS configuration changes

    Hallo,
    in a 10.1 RAC environment,
    is there a file which logs CRS configuration changes, like issuing a oifcfg -setif command?
    Thx

    Yes

  • Firefighter Config change logs / SOD logs are  not displayed..

    We are on GRC 5.3, SP8. I have configured the SUP and firefighter id's are working fine. However, I am getting the message " No match nor conflict found " when I execute the 'Configuration Change Log report' and 'SOD Violations Report' even though the we changed the configuration and FF id's executed conflicting transactions defined in RAR. ' Log data changes ' box is already activated in the following tables:
    1. Configuration (/VIRSA/ZFFCONFIG)
    2. Controllers (/VIRSA/ZFFCNTRL)
    3. Critical Tcodes (/VIRSA/ZVIRTCODE)
    4. Firefighters (/VIRSA/ZFFUSERS)
    5. Owners (/VIRSA/ZVIRFFIDS)
    6. Reason Codes (/VIRSA/ZFFRCD)
    7. Security (/VIRSA/ZVIRFFPWD)
    Still the logs are not displayed.  Thanks for your help.
    Regards,
    Raj

    Hi Raj,
    Can you check the SM37 background job../VIRSA/ZVFATBAK is running or NOT???
    Regards'
    Gangadhar

  • Is there any way to download/print/export the CUP Change Log?

    Does anyone know if there is a way to export, download, print, etc. the CUP Change Log report?  We are on GRC 5.3 SP13.
    We have just started an audit review and the Auditors are asking for a report of all changes made since 10/1/2010.  I can generate it on the Configuration/Change Log/Search Change Log screen but it doesn't seem to have any export/print options.
    If this is not possible, does anyone know what tables make up the Change Log?  I may be able to give them a report off of the tables.
    Thanks.

    Hi Bob,
    by default there is no export feature for that one.
    To find the right table I only see that you would need to query the tables for one of the entries to find the right one as there is no official DB structure published.
    Best,
    Frank

  • Log configuration changes to syslog on Nexus 7000?

    I need to be able to log any configuration changes to syslog on our Nexus switches. On IOS this is easy with the archive commands, but I'm a little stuck trying to do this on our Nexus gear. On the IOS gear I run the commands:
    archive
    log config
    logging enable
    logging size 100
    hidekeys
    notify syslog
    How do I do the equivalent on NX-OS?

    ​Cisco NX-OS can log configuration change events along with the individual changes when AAA command accounting is enabled.
    With command accounting enabled, all CLI commands entered, including configuration commands, are logged to the configured AAA server. Using this information, a forensic trail for configuration change events along with the individual commands entered for those changes can be recorded and reviewed.
    Because of this capability, it is strongly advised that AAA command accounting be enabled and configured.
    Refer to the “TACACS+ Command Accounting” section of this document for more information.
    The Nexus 7000, by default keeps a local accounting log of all the configuration commands entered on the device; you can view this with the 'show accounting log' command.
    In NX-OS, we changed the way logging works.  We keep a local accounting log of all the
    configuration changes ("show accounting log"), but if you want to send those logs to a
    server, it must be done with through a TACACS server.  Please see the below documentation:
    Configuring AAA on Nexus
    TACACS command accounting
    -Thanks
    Vinod
    **Encourage Contributors. RATE Them.**

  • Can the ACE be configured for logging configuration changes to syslog server ?

    Hi,
    On all our routers, switches and firewalls we've configured syslog so we get logs when configuration changes occur.
    Is this possible on the ACE too ?
    regards,
    Sebastian  

    Hi Sebastian,
    Yes it is possible but depends upong the logging level you have set. So logging trap 5 should be able to get you the configuration changes or command execution logs.
    Nov  1 2013 11:20:33 : %ACE-5-111008: User 'admin' executed the 'logging buffered 6' command.
    Nov  1 2013 11:20:48 : %ACE-5-111008: User 'admin' executed the 'no rserver testlog' command.
    So you should see these level 5 logs on syslog if logging trap 5 is configured.
    Let me know if you have any questions.
    Regards,
    Kanwal

  • Configure the Change Log for the activity

    Hi to all,
    I would like to know if it is possible to configure the "change log" for the activity.
    Thanks in advanced,
    Matte

    Carlos,
    Can you be more specific on the term 'Configure'.  Change log is automatically generated by SBO.  The only thing you can change is the numbers of Historical instances of the log
    Administration > System Initialization > General Settings.......Services Tab...History or Log Settings.  Be default it is 99 instances.
    Suda

  • Vendor Classification Change Log Activate : Configuration Change

    Hi,
    I want to know what is the process of activate Change Log for the Vendor Classification. Please suggest.
    Rgds

    You can see in Xk02 / Xk03 transaction - Environment tab - Field changes..

Maybe you are looking for