Cisco ASA Audit Event: 120004

120004: Event dropped

Cisco ASA is a security device that provides the combined capabilities of a firewall,an antivirus,and an intrusion prevention system. It also facilitates virtual private network (VPN) connections.It helps to detect threats and stop attacks before they spread through the network.

Message: %ASA-4-120004:Event group title is dropped.Reason reason.

Event 120004 is generated when a Smart Call Home event is dropped. The event might have been dropped because of one of the following reasons:

  • Various internal errors had occurred.
  • The number of events reached the configured limit.
  • The Smart Call Home module might have been disabled.

The event group, the event title, and the reason for the drop are specified in the message.

How could you resolve this situation?

If the drop reason is Queue Full, try to increase the event queue size and the rate-limit configuration to avoid event queue buildup.If the drop reason is Internal Error,turn on debugging by entering the'debug sch fail'command to obtain more detailed debugging information.

Cisco ASA Auditing Tool

EventLog Analyzer is a comprehensive log management software with which you can centrally collect, analyze, and manage logs from all the different log sources in your network. You also get reports and alerts on your network security, making it a power-packed IT security tool.