Capture CLI input from another user

[jefbowli]

Is it possible to capture commands entered on a router by another user?  What device can I use to monitor my routers everyday and check the logs to see what changes have been made?

[jefbowli]

I am using TACAS and can capture user authentication I just need to capture their changes as well.

[sean_evershed]

Hi, You can use the accounting feature of TACACS to capture all the commands that someone elese has entered on a router.

[jefbowli]

Hey Sean, thanks for your respsonse.  Can you tell me how to do that?  I mean specifics on the server.

[sean_evershed]

Hi, If TACACS authentication is working try adding these commands to your router:

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

Then check your TACACS server after you have made some config changes.

[jefbowli]

Thank you so much Sean.  I just looked up those command they seem like they will work.  Can you tell me where I can view this on the ACS server?  I am running ACS version 5.2