ACS and ODBC logging

[gfolens]

I have a question about Cisco Secure ACS. We make use of ODBC Logging feature. ACS sends logged information to an SQL database server via ODBC connector configured on the ACS machine. The setup is exactly as per Cisco manual.

My question is what happens if ACS fails to connect to SQL DB server? For example, server is down. Will ACS try to connect every time it logs a new entry or does it connect every N seconds/minutes and logs a buffer of logged entries? What is the timeout value to detect failure to connect to SQL server? Is there an internal queue on the ACS server into which it puts all logged entries temporarily, or will ACS discard logging information if it can''t connect to SQL server? What''s the size of the queue, if it exists?

Sorry but I could not find this type of information anywhere on CCO.

rgds, Geert.

[mhoda]

Hi,

I will try to answers your questions to the best of my knowledge. Pl. see inline -

>what happens if ACS fails to connect to SQL DB server? For example, server >is down. Will ACS try to connect every time it logs a new entry or does it >connect every N seconds/minutes and logs a buffer of logged entries?

Everytime, it logs a new entry.

>What is the timeout value to detect failure to connect to SQL server?

To the best of my knowledge, its 15 seconds.

>Is there an internal queue on the ACS server into which it puts all logged >entries temporarily, or will ACS discard logging information if it can''t connect >to SQL server?

No internal queue. If only ODBC logging is truned on then logs would be dropped if you don't have connectivity to the ODBC database. But, you have the option to turn on local logging as well as ODBC logging.

Regards,

Mynul