09-03-2007 03:09 AM - edited 03-10-2019 03:46 AM
Hello,
Is there a way that one can see who and when has logged into the IPS device for a given period of time?
09-07-2007 10:08 AM
The IPS device maintains a log of all events (including who has logged). However if there are lot of events happening the entries in the log gets replaced fast. You can see this log using command "show log" on the IPS device. The IPS cannot be used with Radius or TACACS for authentication or authorization.
09-07-2007 02:30 PM
From the CLI:
# show event status past 23:59 | include loginAction
I'm not sure how you'd go back farther without using the IDM (in the IDM you can tell it to show entire log buffer).
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide