Thanks! I did notice that it was set to "Full" but I'm not sure how it was changed from "Low." I noticed that that stuff isn't logged in the administrative audit.

I think I'm the only user with access to that screen, but I don't recall messing with those settings. Strange.

Do you know if there is a way to point those log files to another directory or drive? I only have 4gb of free space on my drive.

Hi.

To enable remote logging, first you have to add a remote agent. From the online help:

Remote Agents

Cisco Secure ACS uses remote agents for remote logging and for Windows authentication. You must configure remote agents before you can perform either remote logging or Windows authentication.

Adding a Remote Agent

If you are using NDGs, you must first access the NDG to which you want to add a remote agent. To do so, click the name of the NDG in the Network Device Groups table (in Network Configuration).

To add a remote agent, click Add Entry.

Editing a Remote Agent

If you are using NDGs, you must first access the NDG of which the remote agent is a member. To do so, click the name of the NDG in the Network Device Groups table.

To edit information for an existing remote agent, click the name of the server whose information you want to change.

Once done with that, you can go to system configuration, logging, and can set the directory location for each logging file type to point to a different directory location.

Not all of the log files can be changed unfortunately, but those that you can change

are listed there.

Hope this helps, and please rate any posts that are helpful.

Regards,

-Joe

Thanks again. I guess the location of this particular log is not able to be changed. I have the other logs being dumped to a secondary location (due to a similar problem a few years ago).

I guess I will have to just monitor this server and make sure the settings don't get changed again.