Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

User accounting in IPS

Hello,

Is there a way that one can see who and when has logged into the IPS device for a given period of time?

2 REPLIES
Silver

Re: User accounting in IPS

The IPS device maintains a log of all events (including who has logged). However if there are lot of events happening the entries in the log gets replaced fast. You can see this log using command "show log" on the IPS device. The IPS cannot be used with Radius or TACACS for authentication or authorization.

Gold

Re: User accounting in IPS

From the CLI:

# show event status past 23:59 | include loginAction

I'm not sure how you'd go back farther without using the IDM (in the IDM you can tell it to show entire log buffer).

127
Views
0
Helpful
2
Replies