This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
I would like to log every successful authentication or authorization or accounting (I don't know which step is more effective.) as follows:
Is it possible to do that via syslog ? or how ? (It should work very fast)
If your devices are integrated with Cisco ACS for AAA, just enable logging for successfull authentications on the ACS.
Also on the ACS server you can configure to forward the logs to a syslog server.
The field "Caller-ID" shows the IP address of the end user getting authenticated to the Device (shown as NAS in the TACACS logs).
Its enabled by default. If not you need to add the field under
Logging >> Failed Attempts
Logging >> Passed Authentication
Hope this helps.
If you're interesing in logging why not take a look at extraxi aaa-reports?
We have a variety of log collection tools plus scheduled data import and reporting options - including the ACS database itself.
60 trial versions available too!