Solaris

I'm not sure... Can you post full output of /etc/syslog.conf? Check this site: http://www.ciscopress.com/articles/a...26638&seqNum=3

Code:

Specifies the syslog facility number. Instead of specifying the name, the PIX uses a 2-digit number, as follows:
local0 - 16 

local1 - 17 

local2 - 18 

local3 - 19 

local4 - 20 

local5 - 21 

local6 - 22 

local7 - 23

Thank you so much!!!!!!!! Do I do this on /etc/syslog.conf?? I looked and a part looks like this:
local5.debug /pix/dcpixlog
local4.debug /pix/pixlog
local3.debug /usr/log/cache/cachelog
local2.debug /var/log/ras/raslog
local1.debug /var/log/vpn/vpnlog
!
The local5 is what I added just a few days ago...The local1 and local2 are no longer used. Not sure about local3...local4 is most important that is all existing FW. Supposedly the local5 was for new FW. Do, I comment all above and add what you wrote?

Facility 22 on the new Cisco firewall means local6 facility in Solaris log server. You should add this to /etc/syslog.conf:

Code:

local6.debug /pix/new_firewall.log

Modify /pix/new_firewall.log file/path name to your liking. After that restart syslog:

Code:

/etc/init.d syslog stop
/etc/init.d syslog start

Thank you so much... I will try this now.

---------- Post updated at 04:46 PM ---------- Previous update was at 11:12 AM ----------

****bartus11**** God Bless you man.
All of my logging are working....Thank you so much for your help!!!!