cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
537
Views
2
Helpful
6
Replies

Accounting Log in NexusC93180-YC

mahmutaydin90
Level 1
Level 1

Hello,

When we command "show accounting log" , we see  3-4 days ago log of commands. To do see more detailed, we  accessed to bash, directory /logflash/controller/accounting.log  file, it is  0 byte.

  1. I believe this is correct file of this accounting and is it normal to see 0? Why do not we see before 3-4 days?
  2. we want to see show commands  also. ı did termimal log-all command. But there is no any show command in output.

Do you have any experience about this?

regardsi

1 Accepted Solution

Accepted Solutions

liviu.gheorghe
Spotlight
Spotlight

Hello @mahmutaydin90 ,

the accounting logs are located in logflash://sup-active/vdc_1

nx9000-1# dir logflash://sup-active/vdc_1
58281 Feb 18 12:27:46 2024 accounting_log
65419 Feb 18 12:06:21 2024 event_archive_1

 If you want to see show commands, you will have to configure:

nx9000-1(config)# terminal log-all
nx9000-1(config)# show accounting log all

Hope this helps.

Regards, LG
*** Please Rate All Helpful Responses ***

View solution in original post

6 Replies 6

liviu.gheorghe
Spotlight
Spotlight

Hello @mahmutaydin90 ,

the accounting logs are located in logflash://sup-active/vdc_1

nx9000-1# dir logflash://sup-active/vdc_1
58281 Feb 18 12:27:46 2024 accounting_log
65419 Feb 18 12:06:21 2024 event_archive_1

 If you want to see show commands, you will have to configure:

nx9000-1(config)# terminal log-all
nx9000-1(config)# show accounting log all

Hope this helps.

Regards, LG
*** Please Rate All Helpful Responses ***

thank you so much. it works. But do you know why I dont see  3 days ago? this log is persistent right?

You could use the command show accounting log start-time 2024 Feb 1 00:00:00 for example to see logs begining with Feb 1.

When you issue the command dir logflash://sup-active/vdc_1, you should have some accounting files:

nx9000-1# dir logflash://sup-active/vdc_1
58281 Feb 18 12:27:46 2024 accounting_log
65419 Feb 18 12:06:21 2024 accounting_log.1

Just like you see in linux which uses a log rotation algorithm - the current log is called accounting_log and older logs are saved with accounting_log.1, accounting_log.2, etc.

You could use then the command show file logflash://sup-active/vdc_1/accounting_log.1 to see older events.

Regards, LG
*** Please Rate All Helpful Responses ***

Actually, when I check log files under   vdc_1, there are two log files. However they are also showing as much ac in CLI.

So, I am suspicious why there is not log before 3-4 days. 

I started my Nexus 9000v in CML on Friday for some testing, so I don't have either logs older than 3 days. I will keep an eye on it for a few days and get back to you with an update.

And Yes, the logs are written to flash so they are persistent across reloads.

Regards, LG
*** Please Rate All Helpful Responses ***

thank you so much

Review Cisco Networking for a $25 gift card