amigan_99
asked on
Cisco ACS: How to send all radius and tacacs auth information to syslog
When I look at Splunk - where I send my Cisco ACS 5.4 syslog output - I see a record of actions I've done on ACS. But I'm not seeing the TACACS records when I log into various network devices. I can see the tacacs records if I go to Monitoring and Reports section of ACS. How can I view in syslog?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
You could log the events on the server where nps is running.
ASKER
Thank you
The link might address it where you specify which events you want logged ...
Another option you could setup snmptrap and send snmptraps to it with events ...