05-27-2009 03:32 PM - edited 03-10-2019 04:30 PM
Hi everyone:
I have a issue, at this moment i have my ACS 4.1 running with authentication and authorisation. Also in a Switch i have the next lines:
***************************************
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
**************************************
The ACS 4.1 is enabled to use accounting.
in the part of part of "Reports and activity/TACACS+ Accounting" the next information:
-Date
-Time
-User-Name
-Group-Name
-Caller-Id
-Acct-Flags
-elapsed_time
-service
-NAS-IP-Address
-Access Device
-Network Device
-Start Time
But i can not see the commands that the users have used. I will appreciate if anyone can help me
Best regards.
05-27-2009 11:54 PM
ACS will log commands in the T+ Administration logs. The T+ Accounting log will contain session start/stop only.
05-28-2009 08:28 AM
Command accounting logs are stored in tacacs
administration logs. Also there is a known bug on ver 4.1.1 in where we don't get the command accounting logs and to fix this issue we need to apply patch ACS 4.1.1.23.5.
Please see this link,
Regards,
~JG
Do rate helpful posts
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide