Cisco VCS - Events Log

[marco_81]

Hi all,

configuring remote syslos server to collect events is clear on Cisco Guide. Can you confirm there is no other way to gather information such as "logged in user" outside remote syslog server usage?

For example, supposing i had this event on VCS:

httpd[32509]: web: User="admin" Event="Admin Session Start" Src-ip="172.20.151.4" Src-port="53245" UTCTime="2018-03-28 13:49:34"

Is the event logged within a file in the VCS filesystem? I tried accessing with root and admin against ssh cli, but i am not able to find any file storing those events.

any suggestion is appreciated

thanks

[Patrick Sparkman]

Users logged into the VCS web interface are captured in the event log, which can be accessed via the web interface or sent to a syslog server.  The VCS logs can also be downloaded via WinSCP, see Extract Eventlog From VCS and Where can I find the logfiles on a VCS.