Hello, how that I have TACACS running on my device, I notice that the syslog messages for login success have changed i.e. they no longer include a 'Source: x' field. Is there anyway to change this to include a source ?
EXAMPLE OF LOGIN SUCCESS SYSLOG BEFORE TACACS+ IMPLEMENTED:
May 22 14:49:50: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: lastresort] [Source: 10.100.15.106] [localport: 22] at 14:49:50 NZST Tue May 22 2018
EXAMPLE OF LOGIN SUCCESS SYSLOG AFTER TACACS+ IMPLEMENTED:
May 23 08:17:03: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: lastresort] [Source: UNKNOWN] [localport: 0] at 08:17:03 NZST Wed May 23 2018
Notice the Source is now UNKNOWN. How do I get the source field back in, even if it is just the TACACS server IP ?
