ACI log for leaf decommission

[gavinhans]

leafs have been decommissioned from ACI and they came up as unregistered node. I would like to check when the last time these leafs were associated to the fabric and what changes were made or what caused decommission of these leafs. how to check it?

[gavinhans]

please help

[Claudia de Luna]

Hi @gavinhans 

Have you checked the Events and Audit Logs (see sample screen shots attached)?  I would also check Faults as well.

Would be interested to know what you find!

Claudia

[gavinhans]

Thanks for quick response. I am not able to find any log. is there a way to search for particular nodes that are missing from the fabric? could you recommend CLI command to review these logs?

[Claudia de Luna]

What version of ACI do you have?

You can try to ssh to the APIC and run "show events" to get everything...Id suggest logging the output to make it easier to search for the node IDs you care about

apic1# show events
Severity        : info
Affected Object : uni/usersessext/actsession-cS2tscwET_aRMw6EG2jCtw==
Code            : E4215060
ID              : 8589934964
Cause           : transition
Description     : ActiveUserSession cS2tscwET_aRMw6EG2jCtw== deleted
Creation Time   : 2019-09-07T10:33:11.190-04:00


Severity        : info
Affected Object : uni/usersessext/actsession-cS2tscwET_aRMw6EG2jCtw==
Code            : E4215058
ID              : 8589934963
Cause           : transition
Description     : ActiveUserSession cS2tscwET_aRMw6EG2jCtw== created
Creation Time   : 2019-09-07T10:22:14.171-04:00

You can also try the "show events leaf" command with the node id but if the node is not there you may not get anything

apic1# show events leaf 101
Severity        : info
Affected Object : topology/pod-1/node-101/sys/ctx-[vxlan-2293761]/bd-[vxlan-1
                 4811120]/svi-[vlan16]
Code            : E4208074
ID              : 8589934946
Cause           : if-state-change
Description     : Line Protocol on Interface, changed state to up unknown
Creation Time   : 2019-09-07T06:28:16.176-04:00

[gavinhans]

Thanks. i couldn't find anything in the log. I am running 4.1 version. is there a way to filter logs by serial # since leaf is no longer part of fabric.