Hi,
Run the following command on the spines: "log_trace_bl_print_tool /var/log/dme/log/coop_trace.bl"
You can egrep the output to get the logs matching the timestamp : "log_trace_bl_print_tool /var/log/dme/log/coop_trace.bl | grep 2021-08-24T21:34"
Note that the trace file may be rolled out and may not contain old timestamps.
If this is the case, you would need to look for the following files (<X> should be replaced by a number, that would indicate the old log file ordering): "/var/log/dme/oldlog/coop_trace.bl.old.<X>.gz"
First you would need to uncompress the file, and only after that you can use the log_trace_bl_print_tool to decode it.
Run the below commands on both Leaf and Spine switches. But only the recent logs would be available and old logs may be rolled out
show coop internal event-history trace-detail-uc | grep <IP>
If you want to know more on this topic, please raise a Cisco TAC case.
If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.
You can also learn more about Cisco ACI through our live Ask the Experts (ATXs) session. Check out the ATXs Resources [https://community.cisco.com/t5/data-center-and-cloud-knowledge/cisco-aci-ask-the-experts-resources/ta-p/4394491] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.
Thanks and regards,
Tarakesh Jetti
Customer Success Specialist - CX Team.
