Lot of ActiveUserSession Events

[irguazo]

I have reviewed the Events and Audit Logs and in the Events tab I found a lot of records like this :

uni/usersessext/delsession-oKX0GAPrTV6IJZzVIhOEaQ==

Created

uni/usersessext/actsession-4j9PF3KyRViDkqcXR4Lf_w==

Deleted

I have more than 100 pages with 100 entries like this. What is the purpose/meaning of this informational events?

[brlehigh · Accepted solution]

Unfortunately, I don't have a solution as this is happening for me as well.  It started after adding ACI integration into our Infoblox deployment.

I'd be interested to hear if there is a way to prevent these from basically making the Event log useless.

[Robert Burns]

Do you have NAE (Assurance Engine) or Nexus Insights integrated with your fabric?  Integrations like this (and infloblox) will cause a large increase in the AAA/Event logs, as each external node will log into each & every Switch/Controller regularly for polling/retrieval.

Other than cluttering up your logs, its expected.  Anytime a login event occurs, we have to track it.  

Robert