We help IT Professionals succeed at work.

Citrix ADC (NetScaler) 12.1, how can I get to know, who did the last reboot in the NS VPX?

Murty M
Murty M asked
on
Citrix ADC (NetScaler) 12.1, how can I get to know, who did the last reboot in the NS VPX?
From NS VPX console or any Putty commands, please share.
Comment
Watch Question

Sam JacobsCitrix Technology Professional / Director of TechDev Services, IPM

Commented:
There should be a record in ns.log. Using PuTTY, shell out to the kernel, and:
cat /var/log/ns.log | grep -i reboot

Open in new window

Your should get back something like:
Jan 15 09:05:56 <local0.info> 10.x.x.x 01/15/2020:14:05:56 GMT  0-PPE-0 : default CLI CMD_EXECUTED 26998 0 :  User nsroot - Remote_ip x.x.x.x - Command "reboot" - Status "Success"

Open in new window

Author

Commented:
I have a test in my test environment. Connected to Putty, entered to Shell.
root@userid#
Entered given command.
no result.
Sam JacobsCitrix Technology Professional / Director of TechDev Services, IPM

Commented:
The above is an actual run from a test ADC.
You need to shell out - that's why you received a "No such command" error.
The log recycles after a while, so if the reboot occurred a while ago, it might have rolled off.
I always suggest send ADC syslog output to a syslog server (SolarWinds KIwi syslog server has a free edition):
https://www.solarwinds.com/free-tools/kiwi-free-syslog-server
You can log records to disk so you don't have that problem.

Author

Commented:
Got it.
Could you guide me, how to send ADC syslog output to a syslog server --SolarWinds KIwi syslog server?
Do we have any article on how to configure Solarwinds Kiwi Syslog server and ADC VPX?
Citrix Technology Professional / Director of TechDev Services, IPM
Commented:
Download the syslog server onto an IIS web server.
Then, on the ADC, go to System | Auditing | Change Auditing Syslog Settings:
ADC---Syslog-1.jpgEnter the IP of the server with Kiwi on it, and make sure the types highlighted are checked.
ADC---Syslog-2.jpgThen scroll down and click OK.