Re: How can I make it invisible? too many access dna log

choks9696 · ‎03-29-2021

Hi, guys

I completed to install the DNA(2rd v1.3.3.9) last month.

and registered many cisco L3, L2 Network switch to DNA.

After that, I saw DNA log in-out message from all network switch.

1. How can I make it invisible?
without log level control in cisco switch.

2. Can DNA only control access to the switch once a day?
Too many access.

Mar 28 02:50:23.384: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: userID] [Source: x.x.x.x] [localport: 23] at 02:50:23 UTC Sun Mar 28 2021
Mar 28 02:50:31.711: %SYS-6-LOGOUT: User userID has exited tty session 2(x.x.x.x)
Mar 28 02:50:31.786: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: userID] [Source: x.x.x.x] [localport: 23] at 02:50:31 UTC Sun Mar 28 2021
Mar 28 02:57:57.262: %SYS-6-LOGOUT: User userID has exited tty session 3(x.x.x.x)
Mar 28 08:00:25.146: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: userID] [Source: x.x.x.x] [localport: 23] at 08:00:25 UTC Sun Mar 28 2021
Mar 28 08:02:57.046: %SYS-6-LOGOUT: User userID has exited tty session 2(x.x.x.x)
Mar 28 08:50:24.451: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: userID] [Source: x.x.x.x] [localport: 23] at 08:50:24 UTC Sun Mar 28 2021
Mar 28 08:52:27.176: %SYS-6-LOGOUT: User userID has exited tty session 2(x.x.x.x)
Mar 28 08:55:50.584: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: userID] [Source: x.x.x.x] [localport: 23] at 08:55:50 UTC Sun Mar 28 2021
Mar 28 08:55:58.647: %SYS-6-LOGOUT: User userID has exited tty session 2(x.x.x.x)
Mar 28 08:55:58.724: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: userID] [Source: x.x.x.x] [localport: 23] at 08:55:58 UTC Sun Mar 28 2021
Mar 28 09:02:22.990: %SYS-6-LOGOUT: User userID has exited tty session 3(x.x.x.x)
Mar 28 15:00:20.769: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: userID] [Source: x.x.x.x] [localport: 23] at 15:00:20 UTC Sun Mar 28 2021
Mar 28 15:00:28.852: %SYS-6-LOGOUT: User userID has exited tty session 2(x.x.x.x)
Mar 28 15:00:28.925: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: userID] [Source: x.x.x.x] [localport: 23] at 15:00:28 UTC Sun Mar 28 2021
Mar 28 15:08:53.688: %SYS-6-LOGOUT: User userID has exited tty session 3(x.x.x.x)
Mar 28 21:06:49.772: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: userID] [Source: x.x.x.x] [localport: 23] at 21:06:49 UTC Sun Mar 28 2021
Mar 28 21:06:58.011: %SYS-6-LOGOUT: User userID has exited tty session 2(x.x.x.x)
Mar 28 21:06:58.137: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: userID] [Source: x.x.x.x] [localport: 23] at 21:06:58 UTC Sun Mar 28 2021
Mar 28 21:14:24.367: %SYS-6-LOGOUT: User userID has exited tty session 3(x.x.x.x)

Preston Chilcote · ‎03-30-2021

I see a batch of logins every 6 hours. That is the default sync interval. You can update it to 24 hours on the "Network Resync Interval" page of system settings. There might still be occasions where DNA will login to collect information in response to a SNMP trap event from a network device, but a majority of the logins you showed in your log will be gone.

choks9696 · ‎04-04-2021

Thank you so much.
Your opinion was Good solution.

Actually, It was reduced DNA logs in Switchs.

But, that wasn't a fundamental solution.

If the ID is not'admin', the log will not be logged.
There is a new situation where no log is left even if the ID is'admin'.

The ID of numerous devices should be kept as'admin' and no logs should be left.

I need your wisdom.

fabianwickman · ‎07-06-2023

Hi,

We see that DNA logs in to our switches every 2 minutes, despite that we have our resync interval set to 60 min.

Any thoughts?

EPRI · ‎02-26-2024

Hello Fabianwickman! Did you find a solution for this logging in every 2 mins....we are experiencing same issue on latest DNA version. Any suggestions would be most helpful!

Thanks!