Configuration Change Audit Report in Prime Infrastructure 2.1

Is there any plan to implement a Configuration Change Audit report in future releases of Prime Infrastructure (ie. 2.2)? When I go into the Reporting area and run a Change Audit report under the Compliance section it doesn't give me any information in regards to configuration changes, only inventory changes. There are managers who would like the ability to receive an e-mailed report of configuration changes within a 24 hours period. Currently the only way I can tell that you can get this information is by logging into Cisco Prime and going to Network Audit under Operation / Device Work Center.
Thanks,
Brian

Configuration Change Management (with Baseline Compliance reporting) is projected for the next release after 2.2. As of now that's projected to be ca. April 2015.
On a side note, last I heard, 2.2 should be out in the next couple of weeks.

Similar Messages

Change Audit report inquiry

Hi Everyone,
If I just made a new automated action profile under Tools>Change audit and generate a 24 hour change audit report, will it immediately reflect any changes done in the configuration.
Thanks.

The automated actions will take effect immediately and will be triggered based on matching criteria you have defined in the rules and the syslog received from the devices.
Ensure that the Automated Action is enabled for it to take effect:
Select Resource Manager Essentials > Tools > Syslog > Automated Actions, then select action and enable.

LMS 4.2 Change Audit Report

Hi,
The audit/compliance department at one of costumer wants to see the weekly config change audit report.
I have done many test with this feature and i found two problems:
1. The given report path is empty. Only the directories was made and there are not report files.
2. I can not send the report in attachment. How can i publish it automatically? Many reports have attachment option. It has not.
The immediately option is working but it does not make report. ( like .pdf )
How can i send audit change report autmatically to external costumer?
Regards,

Hi,
Sorry for late answer!
I did not config report path, i use the default path! ( i have tried another path setting also )
The screens show the following.
1, job info
2. job report view
If i use the immediatly options the report is good! Only the scheduled job does not make report!
Regards,

Ciscoworks URL not working for RME change Audit Report.

I have configured a 24 hour change report to send me an email everyday. The Change audit link being sent by server is:
http://ciscoworks.mickeymouse.disp:1741/rme/ChangeAuditReportJob.do?reportJobID=1167&reportJobInstID=2&launchedFromMail=true
But I get the following error:
Network Error (dns_unresolved_hostname)
Your requested host "ciscoworks.mickeymouse.disp" could not be resolved by DNS.
For assistance, contact your network support team
But it can resolve the link without the domain name aka: "mickeymouse.disp"
http://ciscoworks:1741/rme/ChangeAuditReportJob.do?reportJobID=1167&reportJobInstID=2&launchedFromMail=true
Is this something wrong with my setup or with Apcahe/TOMCAT and they way it sends out the report link? Bug a Maybe?
Please advise & Thank u in adavance!
Erick

If anyone is interested in my silly question/ answer. The solution was to add my domain-name to my browser..Case close

PO Change Audit Report

Hi everyone,
To become SOX compliant, we're looking for a report which shows changes to POs. Ideally, we want to be able to report on PO changes to significant fields for a given date range. I've looked through the reports in SECR and don't see anything. I found a vendor changes report but not thing for PO changes. Does something already exist in the standard or do we need to custom develop a report.
thanks
Christie

Using the Purchase Order changes for Header and at item level we can get a report developed which can solve the purpose.
The Header Changes and the Item Changes are available in the Environment menu of the Purchase Order Screen.
Hope this helps you.

How to generate changes/ audit reports made on CLI in CSM 3.3.1

Hi guys,
I have a CSM 3.3.1 installed on a Windows Server 2003 SP2.
I have manage a ASA firewall and I would like to track all the changes being made on the ASA firewall CLI via the CSM 3.3.1.
Does anyone know how should I generate such report please?

Your last step should be to import the signed certificate back into your client PKCS#12 keystore, client-keystore.jks.
This file contains the private key used to create your signing requets originally, and must be matched when importing the signed certificate back in.
I think you will need to follow steps 5 & 6 in your DER example to complete the client PKCS12 keystore (including -storetype pkcs12 argument on the import statement).
Another way is to simply convert the keystore created in your DER example into a pkcs#12, by using JRE1.6 command:
keytool importkeystore -srckeystore [jks keystore] -srckeystoretype jks -destkeystore [pkcs12 keystore] -destkeystorestype pkcs12

15 000 rows in reports Cisco Prime Infrastructure 2.2???

Hi all!!! There is a problem with reports exports in csv, pdf formats.The report is divided into several csv or pdf files with max number of rows in the file - 15 000 rows. Can be done to a report generated by a single file (csv or pdf) without limiting the number of rows?
At the 2.0 the csv file was about 20mb per day big. Now at 2.2 i get csv.zip file with the size of about 4mb, and in the zip file there are about 8-10 csv files with about 2-3mb. I have looked in csv file, there are now only exact 15 000 rows.
Is this changed?

That does seem to be a change between PI 2.1 and 2.2.
You basically have to combine those CSV files to re-create a full report.

Changing metric unit in Prime Infrastructure

Hi,
By default, all measurements are displayed in feet, but I want them to be in meters
Anybody knows how to do this?
Thanks

Thanks a lot, Stefan
I managed to change the unit
However, there seems to be errors when I scale the map. I had to change it back to feet for the scaling to work correctly. After a little research, I found out this is a bug of this version (PI 1.2). I'm upgrading to v1.3 now

AUDIT CONFIGURATION CHANGED : SLOT INACTIVE

Hello ,
We've configured security autid via parameters below :
rsau/max_diskspace/per_day:     1996800K
rsau/max_diskspace/local          2048000K
rsau/max_diskspace/per_file      665600K
rsau/enable                               1
rsau/selection_slots                     30
rsau/local/file D:\usr\sap\FKP\DVEBMGS00\log\++++++++.AUD
FN_AUDIT ++++++++######.AUD
DIR_AUDIT D:\usr\sap\FKP\DVEBMGS00\log
In our production system and we repaired security audit screens with abap consultants . Then we could activate audit log for 30 slots . It works very well . We restarted system several times and we didn't get any problem about security configuration .
After a few months , we restarted the system and the slots which we add later changed to inactive .You can see SM20 logs below :
Application Server Stopped
Application Server Started
Audit Configuration Changed
Audit: Slot 1: Class 191, Severity 2, User USER1, Client 200,
Audit: Slot 2: Class 191, Severity 2, User USER2 , Client 200,
Audit: Slot 3: Class 191, Severity 2, User USER3, Client 200,
Audit: Slot 4: Class 191, Severity 2, User USER4, Client 200,
Audit: Slot 5: Class 191, Severity 2, User USER5, Client 200,
Audit: Slot 6: Class 191, Severity 2, User USER6, Client 200,
Audit: Slot 7: Class 191, Severity 2, User USER7, Client *,
Audit: Slot 8: Class 191, Severity 2, User USER8, Client *,
Audit: Slot 9: Class 191, Severity 2, User USER9, Client *,
Audit: Slot 10: Class 191, Severity 2, User USER10, Client *,
Audit: Slot 11 Inactive
Audit: Slot 12 Inactive
Audit: Slot 13 Inactive
Audit: Slot 14 Inactive
Audit: Slot 15 Inactive
Audit: Slot 16 Inactive
Audit: Slot 17 Inactive
Audit: Slot 18 Inactive
Audit: Slot 19 Inactive
Audit: Slot 20 Inactive
Audit: Slot 21 Inactive
Audit: Slot 22 Inactive
Audit: Slot 23 Inactive
Audit: Slot 24 Inactive
Audit: Slot 25 Inactive
Audit: Slot 26 Inactive
Audit: Slot 27 Inactive
Audit: Slot 28 Inactive
Audit: Slot 29 Inactive
Audit: Slot 30 Inactive
We didn't change any parameters or audit configuration before restart   but as I said , after restart audit configuration has changed.
Does anyone has an idea about why audit configuration has changed ?
Thanks & Regards
Ozlem Otunctemur

Özlem Ötünçtemur wrote:
rsau/selection_slots                     30
... we repaired security audit screens with abap consultants .
Have you considered that these ABAP consultants might have made a mess?
The selection slots does not support more than 12 tabs and thankfully your ABAP consultants can't "repair" the SAP kernel which writes the log.
You should read SAP Note # 7 in this case and ask SAP for assistance.
Cheers,
Julius

Cisco Prime Infrastructure 1.3 - SNMPv3 can´t get CPU, memory info.

Hi,
I have a Cisco Prime Infrastructure 1.3 deployment with Catalyst 2960S switches. Switches are running IOS 15.0(2) SE2. All switches have SNMPv2 configured, and all appears to be fine. I'm migrating one switch to SNMPv3, and PI have reachability to the switch, but PI doesn´t receive traps from the switch, and neither poll CPU and memory information (all displays 0.00%).
Somebody have a sample configuration of SNMPv3 with Cisco Prime (Infrastructure or LMS)? I cannot find a Cisco official (or unofficial) document related to this version, usually all mention SNMPv2.
Thank you.
Eduardo

Hi Eduardo:
SNMPv3 is indeed supported for general administration. There's a bug with SWIM using SNMPv3 (CSCud92758), but you should be fine for just monitoring. Have you deleted the switch, waited until Prime Infrastructure told you it was gone, then readded it as SNMPv3 natively? Bug CSCug78869 keeps things from working well when changing SNMP versions.
If you don't have the new Update-1 patch for Prime Infrastructure 1.3.0.20 installed (filename PI_1.3.0.20_Update_1-12.tar.gz) installed, I'd suggest you get it. While it's not going to specifically address this issue, there are a lot of really good fixes in it.
Release Notes for Update 1 for Cisco Prime Infrastructure 1.3.0.20

Cisco Prime Infrastructure 2.1 High availability Question

Hello All,
I am configuring high availability for two prime infrastructure 2.1 servers. I have configured manual HA between the servers. I need to know what will be the configuration in the devices ( switches,routers etc.) for proper working of the HA. For example
Should we need to configure both the prime infra servers as snmp hosts in the devices??. If we have to when an event happens the switch well unnecessarily send the traps to the secondary even when the primary is alive??.
If anyone has a copy of the configuration of such a set up please share it with me.
Thanks and Regards
Shabeeb

Hi Shabeeb,
You are correct on that part that unnecessarily devices will try to send traps to the secondary server if you specify that in the device's config. I don't think it should be a concern , this is expected.
otherwise you need to configure them later once the PI server fail over to secondary .
If you have any other doubt ,kindly ask.
Thanks-
Afroz
***Ratings Encourages Contributors ***

Default netflow port in Prime Infrastructure 1.3

Is there any way to change the default port Prime Infrastructure Assurance 1.3 listens for Netflow on from 9991 to 9996?

I don't think so.
The PI 1.3 docs are pretty silent on Assurance but the Prime Assurance Manager 1.1 Quick Start Guide notes that port 9991 must be open for the Netflow Data Receiver

Change Audit Prime Infrastructure 2.0

When looking at reports: Reports > Compliance > Change Audit
I only receive Inventory Reports with the user name System(which is not benefical). Is there any way to obtain 24 hour Change Reports?
Thanks
CG

Hi,
I know this feature is there is LMS ,where you can configure the AUTOMATED Action based on Syslogs to get an Alert for config change or any other changes ,however I do not see this option available in PI 2.0.
Syslogs are not compltely supported in 2.0 but in PI 2.1 we should have the complete support for syslogs.
Thanks-
Afroz
[Do rate the useful post]

Prime Infrastructure 2.1 Client Statistic Report Issues

Hello Community,
I hope you can help with a couple of issues I am seeing on Prime Infrastructure 2.1, running an evaluation 60 day license.
My PI 2.1 build is currently managing a WLC 5508 running 7.4.121.0, which has been added successfully. No configuration changes were applied to the WLCs, other than SNMP community. No AVC or medianet configuration is applied.
When looking in the 'Operate>Client and Users' dashboard; I can see connected clients and if I select one of them, I can see further details like session, security and client statistics (showing traffic and 802.11 metrics). These are the table views that show current values, however, further down I see graphs but they do not contain any information for RSSI, SNR or traffic sent & received (packets or bytes).
Question: Should I see this information under an evaluation license and if so, what could be stopping it?
Also, when I run the reports 'Report>Report Launch Pad' and select 'Client>Client Traffic' or 'Client>Client Throughput' the resulting report contains 0 bps, when I select 'Report By' AP by Floor Area. I have created a single floor area and placed three access points into it.
Out of interest if I do a report of the same type using 'Report By' All or AP by Controller, I do see traffic graphs for 3 out of 333 access points. Just not the access points that are in my floor area. Also the amount of traffic utilization is tiny (less than a kbps) for a WLC with 800 users.
For a 'Client>Client Count' report using AP by Floor Area, I do see the client numbers connected to the WLC/APs in my configured floor area.
Question: Should I see reports for client traffic and throughput under an evaluation license for floor areas and if so, what could be stopping it?
I have checked the background task and the 'Client Statistics' task is enabled and run time is being updated.
Kind regards,
Ian

Hi,
here is an update:
There are more than one Report you need to start to get data for Device, FAN, Power Supply, Module - look at these reports:
Report > Report Launch Pad > Device > Inventory
Report > Report Lauch Pad > Device > Wired Detailed Device Inventory
Report > Report Lauch Pad > Device > Wired Module Detail > Wired Module Detail Report Details
SFPs and GBICs cannot be reported til now - there are working on it.
br,
chris

Prime Infrastructure 2.0 - Alert on Switch Config Change

We are in the process of testing out Prime Infrastructure 2.0, is there a way to get an alert when a device's configuration has changed, and send out what has changed in email? I have scheduled Config Archiving for all of my devices, and i can see the config differences when a changes is made in the Prime GUI, but we currently use Kiwi CatTools to send out emails that show what devices had configuration changes and what those changes were, it would be nice if Prime would do that so we could do away with that service. I have looked through all of the reports but do not see anything.

Hi,
I know this feature is there is LMS ,where you can configure the AUTOMATED Action based on Syslogs to get an Alert for config change or any other changes ,however I do not see this option available in PI 2.0.
Syslogs are not compltely supported in 2.0 but in PI 2.1 we should have the complete support for syslogs.
Thanks-
Afroz
[Do rate the useful post]

Configuration Change Audit Report in Prime Infrastructure 2.1

Similar Messages

Maybe you are looking for