cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
769
Views
55
Helpful
2
Replies

Lot of ActiveUserSession Events

irguazo
Level 1
Level 1

I have reviewed the Events and Audit Logs and in the Events tab I found a lot of records like this :

 

uni/usersessext/delsession-oKX0GAPrTV6IJZzVIhOEaQ==

Created

uni/usersessext/actsession-4j9PF3KyRViDkqcXR4Lf_w==

Deleted

 

I have more than 100 pages with 100 entries like this. What is the purpose/meaning of this informational events?

 

Events.PNG

1 Accepted Solution

Accepted Solutions

brlehigh
Level 1
Level 1

Unfortunately, I don't have a solution as this is happening for me as well.  It started after adding ACI integration into our Infoblox deployment.

I'd be interested to hear if there is a way to prevent these from basically making the Event log useless.

View solution in original post

2 Replies 2

brlehigh
Level 1
Level 1

Unfortunately, I don't have a solution as this is happening for me as well.  It started after adding ACI integration into our Infoblox deployment.

I'd be interested to hear if there is a way to prevent these from basically making the Event log useless.

Robert Burns
Cisco Employee
Cisco Employee

Do you have NAE (Assurance Engine) or Nexus Insights integrated with your fabric?  Integrations like this (and infloblox) will cause a large increase in the AAA/Event logs, as each external node will log into each & every Switch/Controller regularly for polling/retrieval.

Other than cluttering up your logs, its expected.  Anytime a login event occurs, we have to track it.  

Robert

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Save 25% on Day-2 Operations Add-On License