cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
804
Views
0
Helpful
1
Replies

How to Can track the user access info of Cisco Terminal Server with EEM

Ranga.Sam
Level 1
Level 1


Support,


Can we track the user access info of Cisco Terminal Server ? Requirement are as below:

event1: when a user logs in
event2: when a user accessing any device through terminal server

action1: capture user info with time-stamp and append into a file in tftp server
action2: generate syslog messages with same info and report to syslog server

 
base template to capture user info is as below but it does not track device access info:
!
conf t
!
logging buffered 7
!
username bob password cisco
!
event manager applet test2
event cli pattern "enable" sync no skip no
action 1 cli command "enable"
action 1.2 cli command "term length 0"
action 2.1 cli command "show clock | append tftp://10.10.10.10/userinfo.txt"
action 2.2 cli command "show clock"
action 3 syslog msg "$_cli_result"
action 4.1 cli command "who | append tftp://10.10.10.10/userinfo.txt"
action 4.2 cli command "who"
action 5 syslog msg "$_cli_result"
!
 
!
line vty 0 4
!
login local
!
 

end

1 Reply 1

Joe Clarke
Cisco Employee
Cisco Employee

IOS has built-in facilities to do most of what you want.  You could extend them for the TFTP option.  Try configuring:

login on-success log

login on-failure log

archive

 log config

  logging enable

  notify syslog contenttype plaintext