Parsing logs to remote destination(FTP) from Cisco Secure ACS 5.X

[network_geek]

Hi All,

Although this device is an older one but I still feel some people might be working on them. I need your guidance in achieving the following:

All Accounting Logs of users(all commands entered) are to be transferred after a specific interval to remote destination: I have either an FTP server or I can have a machine used for storage purposes only.

Can someone please share step by step guide?

Any information in this regards will be highly appreciated.

[balaji.bandi]

you may find option here :

System Administration > Log Configuration > Remote Log Targets > Create to set the IP address of the remote log server.

also attached one archive document from my hdd.

[network_geek]

Hi Balaji,

Please refer to attached screenshot taken from ACS. Moreover, I can confirm reachability b/w ACS and FTP. Lastly, would you need further outputs that might aid you.

ping A.B.C.D (A.B.C.D) 56(84) bytes of data.
64 bytes from A.B.C.D: icmp_seq=1 ttl=61 time=0.636 ms
64 bytes from A.B.C.D: icmp_seq=2 ttl=61 time=0.639 ms
64 bytes from A.B.C.D: icmp_seq=3 ttl=61 time=0.650 ms
64 bytes from A.B.C.D: icmp_seq=4 ttl=61 time=0.525 ms

[network_geek]

Hi Balaji,

Thank you for your update. I have configured the repository. Now when will I get to see the accounting logs on the remote server? Can I specify a period as well?

[balaji.bandi]

if the path is correct they pushed automatically check on the remote server.

[network_geek]

Hi Balaji,

It shows me all the contents of remote server from ACS as explained in the guide but still nothing was saved in the remote server whatsoever. I think not many people have worked on this particular scenario.

[balaji.bandi]

Can you post the screenshot and configuration? (whatever you can provide)

do you have reachability from ACS to the destination server?