2.2.2 Set 'buffer size' for 'logging buffered'

Information

Enable system message logging to a local buffer.

The device can copy and store log messages to an internal memory buffer. The buffered data is available only from a router exec or enabled exec session. This form of logging is useful for debugging and monitoring when logged in to a router.

Solution

Configure buffered logging (with minimum size). Recommended size is 64000.

hostname(config)#logging buffered [<em>log_buffer_size</em>]

Impact:

Data forensics is effective for managing technology risks and an organization can enforce such policies by enabling the 'logging buffered' command.

See Also

https://workbench.cisecurity.org/benchmarks/17130

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-3, 800-53|AU-3(1), 800-53|AU-7, 800-53|AU-12, CSCv7|6.3

Plugin: Cisco

Control ID: fb3e09419b6eb38b1c266a4179a18c1e7e66c75c019a2bb1ce20f3cd48d02710