Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Alert notification if a particular user enters config t

I just implemented ACS 3.3 for our network. We have one third party user who will be logging in remotely. Is it possible for ACS to send an immediate notification when they do? I know I can review the logs, but I would like to receive an alert anytime this user goes into config t mode.

1 REPLY
Silver

Re: Alert notification if a particular user enters config t

To do this in real time I think the only way is to have T+ admin accounting written through to an ODBC backend and have a stored procedure running that traps the command in question. Of course, how the RDBMS notifies you is another matter.

So the short answer is probably not!

Alternatively, if not real time, would a couple of minutes be ok? Our next version (2.0) of aaa-reports! supports ACS active file importing. Combine this csvsync (to collect logs over http), emailed reports and the whole process being automated - we could email you a report within a couple of minutes of the event.

I say a few minutes because we poll the logs and an interval less than that would cause undue stress on the ACS server.

Darran

www.extraxi.com/contact.htm

143
Views
0
Helpful
1
Replies
CreatePlease to create content