The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
The Network Audit window displays changes made to devices using the Configuration Archive and Software Management features. To view these changes, choose . Cisco EPN Manager lists the most recent devices changes including the type of change (Configuration Archive, Software Image Management). For examples, see:
You can also view the most recent changes for a device in the Recent Changes tab of its Device 360 view. See Get Basic Device Information: Device 360 View.
Cisco EPN Manager supports managing change audit data in the following ways:
The Change Audit report lists the actions that users have performed using theCisco EPN Manager features. The following table provides examples of what may appear in a Change Audit report.
Feature |
Examples |
---|---|
Device management |
Device '209.165.202.159' Added |
User management |
User ‘mmjones' added |
Administration |
Logout successful for user jlsmith from 209.165.202.129 Authentication Failed. Login failed for user fjclark from 209.165.202.125 |
Configuration changes |
CLI Commands : ip access-list standard testremark test |
Monitoring policies |
Monitoring Template 'IF Outbound Errors (Threshold)' Created |
Configuration templates |
Configuration Template 'Add-Host-Name-IOS-Test' Created |
Jobs |
'Show-Users-On-Device-IOS_1' job of type Config Deploy - Deploy View scheduled. |
Inventory |
Logical File '/bootflash/tracelogs/inst_cleanup_R0-0.log.19999.20150126210302' deleted. |
You can schedule a Change Audit report to run on a regular basis and, if desired, Cisco EPN Manager can e-mail the results to you. You can also forward this information in a Change Audit notification (see Enable Change Audit Notifications and Configure Syslog Receivers).
If desired, you can configure Cisco EPN Manager to send a change audit notification when changes are made to the system. These changes include device inventory and configuration changes, configuration template and monitoring template operations, and user operations such as logins and logouts and user account changes.
You can configureCisco EPN Manager to:
Forward changes as change audit notifications to a Java Message Server (JMS).
Send these messages to specific syslog receivers.
If you configure syslog receivers but do not receiver syslogs, you may need to change the anti-virus or firewall settings on the destination syslog receiver to permit reception of syslog messages.
Note | Cisco EPN Manager sends all change audit notifications in XML format to the topic ChangeAudit.All. You must be subscribed to ChangeAudit.All to receive the notifications. |
The System Audit window lists all Cisco EPN Manager GUI pages that users have accessed. To view a System Audit, choose .
The following table shows some of the information you can find from the System Audit page using the quick filter. To enable the quick filter, choose Quick Filter from the Show drop-down list.
Find actions performed: |
Do the following: |
---|---|
By a specific user |
Enter the username in the Username quick filter field |
By all users in a user group |
Enter the group name in the User Group quick filter field |
On devices in a specific virtual domain |
Enter the virtual domain name in the Active Virtual Domain quick filter field |
By the web GUI root user |
Select Root User Logs from the Show drop-down list |
On a specific device |
Enter the IP address in the IP Address quick filter field |
On a specific day |
Enter the day in the Audit Time quick filter filed (in the format yyyy–mmm–dd) |
Cisco EPN Manager provides three classes of logs which are controlled by choosing .
Logging Type |
Description |
See: |
---|---|---|
General |
Captures information about actions in the system. |
|
SNMP |
Captures interactions with managed devices. |
Enable SNMP Traces and Adjust SNMP Log Settings (Levels, Size) |
Syslog |
Forwards Cisco EPN Manager audit logs (as syslogs) to another recipient. |
You can view system logs after downloading them to your local server.
By default, Cisco EPN Manager logs all error, informational, and trace messages generated by all managed devices. It also logs all SNMP messages and Syslogs that it receives. You can adjust these settings, changing logging levels for debugging purposes.
To do the following: |
From Administration > System Settings > Logging: |
||
---|---|---|---|
Change the size of logs, number of logs saved, and log naming convention |
Adjust the Log File Settings.
|
||
Change the logging level for specific modules |
In the General Log Settings, select the files and the desired level, and click Save. You will have to restart Cisco EPN Manager for the changes to take effect. |
||
Download log files for troubleshooting purposes |
In the Download Log File area, click Download. |
||
E-mail log files (for example, to the Cisco Technical Center) |
Enter a comma-separated list of e-mail IDs and click Send. |
Note | This procedure sets and log message levels to Trace. Be sure to return the log message levels to their original setting so system performance is not impacted. |
Enable SNMP tracing to access more detailed information about the packets sent and received through SNMP. You may want to do this when troubleshooting, such as when a trap is dropped.
To make the following changes, choose SNMP Logging Options.
, then choose
If you want to: |
Do the following: |
||
---|---|---|---|
Enable SNMP tracing on specific devices |
In the SNMP Log Settings area: |
||
Change the size of logs and number of logs saved |
In the SNMP Log File Settings area:
|