Blank reports observed on remote logging server

[size57]

Dear All,

Below are the logs I have captured from SysEvenDump.txt in package.cab, can you somebody tell meaning of those.

My issue is some of the logs reports like administration and accounting are showing only headings no actual data is available in the reports. But some of the reports are shwoing proper data like passed and failed authentication reports. But the data in passed and failed authentication delayed I am not able to see it real time in active. report

Also if get solution on above issu will be great.

Mon Feb 14 04:00:25 2011 ID: 0x80002B9E Type: 2 Source: DnsApi Sessage:{8C2D915C-5D0E-4BEB-B64C-5BCCC7A77876}xyz_TACACSxyz_tacacs.xyz.com
101.116.20.18730.162.04.13719.44.156.1442#
Mon Feb 14 05:00:28 2011 ID: 0x8000A000 Type: 2 Source: LSASRV Sessage:DNS/hostname.syz.comKerberos"There are currently no logon servers available to service the logon request.

(0xc000005e)"
Mon Feb 14 06:00:30 2011 ID: 0x8000A000 Type: 2 Source: LSASRV Sessage:DNS/hostname.syz.comKerberos"There are currently no logon servers available to service the logon request.

(0xc000005e)"
Mon Feb 14 07:00:32 2011 ID: 0x8000A000 Type: 2 Source: LSASRV Sessage:DNS/hostname.syz.comKerberos"There are currently no logon servers available to service the logon request.

(0xc000005e)"
Mon Feb 14 08:00:34 2011 ID: 0x8000A000 Type: 2 Source: LSASRV Sessage:DNS/hostname.syz.comKerberos"There are currently no logon servers available to service the logon request.

(0xc000005e)"
Mon Feb 14 09:00:37 2011 ID: 0x8000A000 Type: 2 Source: LSASRV Sessage:DNS/hostname.syz.comKerberos"There are currently no logon servers available to service the logon request.

(0xc000005e)"
Mon Feb 14 10:00:39 2011 ID: 0x8000A000 Type: 2 Source: LSASRV Sessage:DNS/hostname.syz.comKerberos"There are currently no logon servers available to service the logon request.

(0xc000005e)"

Also below are the logs from AppEventDump.txt, I just copid it CSMon, logs are coming for other services as well, want to know why these logs are coming.

Mon Nov 16 16:10:01 2009 ID: 0x40020005 Type: 0 Source: CiscoAAA Sessage:CSMon Message: Service CSAdmin has been stopped or paused by the system. Monitoring will suspend until the service is restarted.
Mon Nov 16 16:10:11 2009 ID: 0x40020005 Type: 0 Source: CiscoAAA Sessage:CSMon Message: Service CSAdmin has been restarted so monitoring will now continue.
Mon Nov 16 16:13:01 2009 ID: 0x40020005 Type: 0 Source: CiscoAAA Sessage:CSMon Message: Service CSRadius has been restarted so monitoring will now continue.

[Jatin Katyal]

Do you see the same tacacs administration and accounting logs on the ACS SE >> reports and activities >> tacacs administration || tacacs accounting?

Are these option are checked under the system configuration >> logging, to log the entries?

What version of ACS  SE are you using?

This is a known issue with ACS 4.1.1.23,

CSCsg97429 - TACACS+ Command Accounting does not work in ACS 4.1(1) Build 23.

This has been fixed in patch 5, i.e. 4.1.1.23.5

Rgds, Jatin

Do rate helpful posts~

[size57]

Do you see the same tacacs administration and accounting logs on the ACS SE >> reports and activities >> tacacs administration || tacacs accounting?

ans: - Issue is there for tese log reports as well but not the same. Reports here are inconsistant means sometimes reports are genearting sometimes not. and this is for all reports.

Are these option are checked under the system configuration >> logging, to log the entries?

ans: Yes

What version of ACS  SE are you using?

AnS: acs 4.2 se