cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
606
Views
0
Helpful
1
Replies

Logs on ACS Appliances

KEVIN WINANT
Level 1
Level 1

On the old windows based acs, all the logs were in a very neat and viewable format, either thru the app itself or thru the windows folders.

The logging view on the appliances themselves actually makes me crazy and results take time to be presented.

My question, where specifically via the appliance CLI are the logs located??. Aside from wanting to be able to grep the logs there when needed,,we also have a requirement to "massage" those logs daily to obtain specific information.  Thanks In Advance! 

1 Reply 1

camejia
Level 3
Level 3

Hello,

I have checked and we can retrieve the ACS Passed/Failed authentication from the CLI using the following commands:

acs81/acsadmin# sh acs-logs

The above command will list the available filenames from the ACS logs. We might want to focus on the ones that include "acsLocalStore.log"

Then we can execute:

acs81/acsadmin# show acs-logs filename acsLocalStore.log

The above command will list the Authentication attempts reports on the CLI output. It might not be a friendly way to review them but you can copy/paste on Notepad++ or any other Text Editor and look for the Username attempts that way.

If this was helpful please rate.

Regards.