2.2.2 Set 'buffer size' for 'logging buffered'

Information

Enable system message logging to a local buffer.

Rationale:

The device can copy and store log messages to an internal memory buffer. The buffered data is available only from a router exec or enabled exec session. This form of logging is useful for debugging and monitoring when logged in to a router.

Impact:

Data forensics is effective for managing technology risks and an organization can enforce such policies by enabling the 'logging buffered' command.

Solution

Configure buffered logging (with minimum size). Recommended size is 64000.

hostname(config)#logging buffered [<em>log_buffer_size</em>]

Default Value:

No logging buffer is set by default

See Also

https://workbench.cisecurity.org/files/3829

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CSCv7|6.3

Plugin: Cisco

Control ID: 6d47a1afbb94dfc3a43a9f5223e15a3de1ef82b84fa531c57ba91dc3b5fb06b3