cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
917
Views
10
Helpful
2
Replies

Syslog entry on enable event

e-alvarez
Level 1
Level 1

Hi,

Is there any way to send a message to a Syslog server when a user goes into privileged mode (enable)?

Thanks

2 Replies 2

Joe Clarke
Cisco Employee
Cisco Employee

You can use the command "logging userinfo" (assuming your IOS supports it) to do this. When a user enables oneself, the following message will be printed:

%SYS-5-PRIV_AUTH_PASS: Privilege level set to 15 by USER on LINE (IP)

Thanks, Joe

I just tried it and it worked like a charm!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: