ACS 5.2 and CS-MARS

[r.spiandorello]

Hi, how can I configure ACS 5.2 to send syslog messages to CS-MARS ?

thank you in advance

greating

rs

[jrabinow]

1) Add a new Remote Log Target

System Administration > Configuration > Log Configuration > Remote Log Targets

Press "Add" and enter the details of the remote server

2) Select the categories of messages you want to be sent to this server

System Administration > Configuration > Log Configuration > Logging Categories > Global

Can select a category and then go to the Remote Syslog targets tab and select the new server you defined above if you want it to receive messages of this type

The confguration is hierarchical so if you define a target for "AAA Audit" it will apply to both "Failed Attempts" and "Passed Authentications"

Note these configruations are global (apply equally to all servers in the deployment) or can be done per instance and can have different settings on a per server basis

[r.spiandorello]

Hi, it seems no packet has been received by the CS-MARS.

Are you sure CS-MARS is compatible with ACS 5.2 ?

thank you in avdance

greatings

rs

[jrabinow]

I do not have any specific experience with CS-MARS. I was providing information as to how to define that the syslog messages themselves will be sent to a specific IP address