ACI Contract Logging / Failed Attempts

[zachartl]

Hello,

I apparently was provided incomplete TCP/UDP Port information for formulation of an ACI Contract. I'm being asked if we're able to observe log data that would provide us an indication of failed TCP or UDP connection attempts.  

Thank you,

Terry

[Sergiu.Daniluk · Accepted solution]

Hi @zachartl 

You can enable Log directive on the contracts, however, this will show you only the traffic matching the contract.

Have a look on this article about contract logging:

https://unofficialaciguide.com/2018/08/11/logging-acl-contract-permits-and-denies-with-aci/

Stay safe,

Sergiu

[zachartl]

Hey Sergiu,

 Thank you again for Your Guidance. I'm on it!

Have a Great Day too!

Terry