3
Ok apparently that's what the Splunk plugin does as well.
See "Splunk Add-on for Cisco ASA" https://splunkbase.splunk.com/app/1620/
# direction is inbound
[cisco_asa_message_id_302013_302015_inbound]
REGEX = -30201[35]:\s*(\S+)\s+([Ii]nbound)\s+(\S+)(?:\s+connection)?\s+(\d+)\s+for\s+([^:\s]+)\s*:\s*(?:((?:[\d+\.]+|[a-fA-F0-9]*:[a-fA-F0-9]*:[a-fA-...
2
You could write your firewall rules so that the "noisy" communication falls into a dedicated "Allow" rule and turn off logging for such rule.
1
It's not just NAT but also routing in your case.
For NAT this should do:
nat (inside,outside) after-auto source dynamic any interface
For routing you will need to route "inside" networks to your inside router:
route inside 192.168.10.0 255.255.255.0 172.16.0.1
route inside 192.168.20.0 255.255.255.0 172.16.0.1
route inside 192.168.30.0 255.255.255....
Only top voted, non community-wiki answers of a minimum length are eligible