Solved: Can the ACE be configured for logging configuration changes to syslog server ?

sebastianvandijk · ‎11-01-2013

Hi,

On all our routers, switches and firewalls we've configured syslog so we get logs when configuration changes occur.

Is this possible on the ACE too ?

regards,

Sebastian

Kanwaljeet Singh · ‎11-01-2013

Hi Sebastian,

Yes it is possible but depends upong the logging level you have set. So logging trap 5 should be able to get you the configuration changes or command execution logs.

Nov 1 2013 11:20:33 : %ACE-5-111008: User 'admin' executed the 'logging buffered 6' command.

Nov 1 2013 11:20:48 : %ACE-5-111008: User 'admin' executed the 'no rserver testlog' command.

So you should see these level 5 logs on syslog if logging trap 5 is configured.

Let me know if you have any questions.

Regards,

Kanwal

View solution in original post

Kanwaljeet Singh · ‎11-01-2013

Hi Sebastian,

Yes it is possible but depends upong the logging level you have set. So logging trap 5 should be able to get you the configuration changes or command execution logs.

Nov 1 2013 11:20:33 : %ACE-5-111008: User 'admin' executed the 'logging buffered 6' command.

Nov 1 2013 11:20:48 : %ACE-5-111008: User 'admin' executed the 'no rserver testlog' command.

So you should see these level 5 logs on syslog if logging trap 5 is configured.

Let me know if you have any questions.

Regards,

Kanwal

sebastianvandijk · ‎11-05-2013

Hi Kanwal,

Thanks, that did the job.

Kanwaljeet Singh · ‎11-05-2013

Hi Sebastian,

You are welcome and i am glad it helped you.

Regards,

Kanwal