CSLogAgent is the logging service. CSAgent controls the logging service but receives logging data from appliances directly. When CSLogAgent starts, it requests its configuration from the configuration provider specified in the CSAgent.ini file. After it has received its configuration, it is ready to perform logging services. If CSLogAgent encounters problems receiving its configuration from the configuration provider, it restarts periodically until it succeeds in receiving its configuration.
When a remote agent starts, it reads its CSAgent.ini file to determine which services should be available and which appliance is its configuration provider. Then it contacts the configuration provider and requests its configuration.
Ports—By default, CSLogAgent listens to TCP port 2006 for communication with the configuration provider and on TCP port 2007 for accounting data from any permitted appliance.
What is the full version of ACS appliance? You can check this under system configuration >> appliance upgrade status.
In order to generate some logs on demand.
Go to reports and activities > administration audits > click refresh/reload few times.
From the RA server collect the below listed files.
C:\Program Files\Cisco\CiscoSecure ACS Agent\CSLogAgent\Logs
C:\Program Files\Cisco\CiscoSecure ACS Agent\CSAgent.ini
Jatin Katyal
- Do rate helpful posts -
~Jatin
