ACS 4.1 fails to record command to log file

Unanswered Question
Jan 2nd, 2008
User Badges:


I am having problems making ACS 4.1 record user command information to the tacacs+ log file. I have set both the cmd and cmd-arg fields for the log but all I get is this:

Date Time User-Name Group-Name Caller-Id Acct-Flags elapsed_time service task_id addr NAS-Portname NAS-IP-Address cmd

01/02/2008 16:48:55 mark Group 1 start .. shell 269 .. tty1 ..

I have attached two files one csv with the log contents and the other showing the AAA config and the log configuration on the ACS server. Any thoughts would be appreciated.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
cisco24x7 Wed, 01/02/2008 - 16:45
User Badges:
  • Silver, 250 points or more

This is a known issue with ACS. You need

to upgrade the ACS 4.1 with a hotfix and

the accounting will be fixed.

CCIE Security

mark.armstrong@... Mon, 01/07/2008 - 03:14
User Badges:


I have applied the patch Acs- and the version in the acs console is reported as Release 4.1(1) Build 23 Patch 4

Unfortunatly no detail is being written to tacacs+ for command accounting.

Any thoughts more than welcome.


mark.armstrong@... Mon, 01/07/2008 - 03:27
User Badges:


Found the problem :-) Looking in the wrong log. You would have thought that the detail would be written to the accounting log !! But no it goes into the administration log.

Happy now, Thanks for all the help



This Discussion