[ACS 5.2] Reports only 100 pages?

[Patrick Tran]

Hello,

Our Cisco ACS logs more than 50 000 authentications per day.

If I want to see today's authentications with reports viewer, "only" 100 pages are displayed. (few hours...)

How can I retrieve all authentications for a specified day?

Thanks for your help,

Patrick

[mauzamor]

Hello Patrick,

The ACS 5.x was designed to keep only 100 pages of logs. This unit generates a lot of information that will saturate the server if everything is stored in the internal hd, so there is an option to send these logs to an external Syslog server, this option is located under System Administration/Log Configuration:

http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_system/5.3/user/guide/admin_config.html#wp1063768

[jrabinow · Accepted solution]

There are two changes related to this functionality in ACS 5.4:

- Even though report generated can still only be 100 pages, there is also option to export to CSV file and include more records than that.

- can generate the report based on timestamp as well. So can reduce the granularity of each set of data and retrieve / view the data in smaller chunks

[antero]

You can refine the authettications for a specific day, for a specific device, along other options. If your logs are more than 100 pages,then your solution miht pass for an external syslog.

cheers

Antero

[Patrick Tran]

Thank you for all your answers.

Best regards,

Patrick