Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Tacacs+ accounting log question

I have a tacacs server running for accounting purpose only (so I use local authentiation). So I can collect all accounting logs only.

This is a snapshot for accounting part.


Tacacs accounting logs

<102> 2014-02-23 10:20:22 [] 02/23/2014 10:20:22 NAS_IP=10.254.1.x Port=443 rem_addr= User= brian Flags=Stop task_id=57 cmd=perfmon interval 10 service=shell elapsed_time=0

<102> 2014-02-23 10:23:51 [] 02/23/2014 10:23:51 NAS_IP=10.254.1.x Port=0 rem_addr= User=brian Flags=Stop task_id=58 cmd=configure term service=shell elapsed_time=0

<102> 2014-02-24 07:06:31 [] 02/24/2014 07:06:31 NAS_IP=10.254.1.x Port=443 rem_addr= User=mike Flags=Stop task_id=59 cmd=perfmon interval 10 service=shell elapsed_time=0

<102> 2014-02-24 07:07:53 [] 02/24/2014 07:07:53 NAS_IP=10.254.1.x Port=0 rem_addr= User=mike Flags=Stop task_id=5a cmd=configure term service=shell elapsed_time=0

As you can see, I can't see any command lines, such as show int ip b.   I can see all routers and switches logs, but ASA logs shows only like above. No mather what commands I used, it only shows above logs. Do i miss something? I like to capture all commands lines when users use ASDM because we use always ASDM.

I used Free tacacs+ server, not ACS.

Thanks for your time.

Everyone's tags (4)