Although I agree with Mohammed that you should be careful when enabling logging on so many rules, especially on the ASA, you could add the log keyword using a simple python script. First pull the ACL configuration from the ASA and save it in a file. Then run the following script to add the log keyword at the end of each entry. Be sure to change the path to where the files are located to match the actual location you have saved them to:
#Read the original ACL file and add the entries into a list
def read_file():
with open('D:\\Python\\Network Programability\\Files\\ASA_ACL.txt', 'r') as file_object:
file_info_list = []
for line in file_object:
file_info_list.append(line.strip())
return file_info_list
#Loop through the newly created list adding the log keyword at the end of the ACL and write to a new file
with open('D:\\Python\\Network Programability\\Files\\ASA_ACL_new.txt', 'w') as write_file:
file_object = read_file()
for line in file_object:
write_file.write(f"{line} log\n")
You can obviously script the process of adding the lines back to the ASA. However, I prefer to do that part as a manual job as I can then react to any errors or issues that might pop up while adding them.
--
Please remember to select a correct answer and rate helpful posts
