Configuration change logs with EEM

Hi,
I am trying to log all commands executed on the Cisco Router. And it is working fine. However it wont show who executed the commands. It just shows command was executed
*Nov 15 00:38:56.356: %HA_EM-6-LOG: cli-match: configure terminal Command Executed
*Nov 15 00:39:08.060: %HA_EM-6-LOG: cli-match: do-exec sh ip int brief Command Executed
*Nov 15 00:39:08.066: %HA_EM-6-LOG: cli-match: show ip interface brief Command Executed
PE4(config)#
*Nov 15 00:39:12.940: %HA_EM-6-LOG: cli-match: do-exec sh logg Command Executed
*Nov 15 00:39:12.945: %HA_EM-6-LOG: cli-match: show logging Command Executed
I know i can setup using config archive logging for the config change. but my requirement is for show command as well. We use radius for authentication and it is not doing command authorisation and accounting..
If any one know what I can append in so that it can show who executed the command.
thanks
Aijaz

The CLI command I'm trying to run is "copy runnning-config tftp", but I don't know how to pass variable on the ASA. I know some Cisco IOS you can create environment variable for the EEM to use. The command I'm trying to run requires user input such as: the source file, destination tftp client and the destination file. How to pass that? Or maybe what command can I run to save the config to a remote server?
thanks,

Similar Messages

Configuration Change log in Production

Hi all
Some configuration changes have been directly made in production at our client. How can we find out what changes are made? Going into SCC4 > Change logs, I could find out who made all the changes. But it does not show what configuration changes are made.
Thanks
Vamsi

Dear Vamsi,
I'm not sure whether in a single report you can fetch all the changes related to configuration for a particular module.
But I'm sure in most of the nodes the configuration change logs gets recorded.Check these links,
Re: How to find when a new Material type is created
Configuration change Log
Regards
Mangalraj.S

Configuration change Log

Hi,
I need to find the configuration change log in development system. Do we have any transaction/report/program from which we can track all the configuration changes for a perticular object.
Thanks,
Vijay

for almost all customizing you can find the change history in menu tools within the cuistomizing.

Configuration Changes logging issue, ASDM related?

I've run into an interesting problem.
ASA: 8.4(2)
ASDM: 6.4(5)
When I make a change at the CLI, syslog message ASA-5-111008 is generated and sent to the syslog servers, local buffer, and ASDM.
When I make a change in ASDM, syslog message ASA-5-111008 is generated and sent to the local buffer and ASDM. It is NOT sent to the syslog server.
Here's my logging config...
Firewall# sh run logging
logging enable
logging timestamp
logging standby
logging buffer-size 409600
logging buffered informational
logging trap notifications
logging asdm notifications
logging host Inside xx.xx.xx.AA 6/1468
logging host Inside xx.xx.xx.BB 6/1468
logging flash-minimum-free 10240
logging flash-maximum-allocation 10240
logging permit-hostdown
Surely I'm missing something obvious. Is this a known bug?
Thanks!

Ha, I did upgrade just a few minutes ago, but same result.
That does look similar, and so does ...
CSCth14248 ASA not sending all logging messages via TCP logging
Looks like I'll need to upgrade to 8.4(3) to fix these and see how it goes.
thanks!

PIR Price change log with validity period

HI All,
We have a requirement in our project for a report that shows Price change (i.e. Old value and new value) in PIR. Yes i know there are lot of standard reports through which i can see the change but i am facing difficulty in tracking these changes to a validity period. For eg: if a PIR has 4 validity periods for every quarter, how can i link the price change to the validity period for which that change was made?
We are open to develop custom report if standard is not available but need logic to determine the validity period.
Thanks in Advance.

Dear Vipin Sharma
If you find your solution, then you should close your discussion. Have a look into the blog for a guidance How to close a discussion and why

Change log of customer filled with garbage with inbound ADRMAS IDOC

Hi gurus,
when i process inbound IDOC ADRMAS for updating customer addres then Change log of customer filled with garbage.
the idoc is having FAX segment PAGER segment etc etc and if no data change even then there are many entries in change log with Delete..
Please help..
regards

Hello,
If it is a Custom Posting Program, please verify that your code is clearing the Log before it takes in any new content.
Also, check the Data and try posting it again.
Thanks and Regards,
Venkat Phani Prasad Konduri

Change log for CRM service order

Dear Experts,
I've created log profile in CRM under IMG path Customer Relationship Management->Basic Functions-> Change log with protocolo " Changed document " & segment " PRICING_I ". This log profile is attached to transaction type service order.
Basic idea is to capture the changes made on the pricing in service order. Now with this setup where can i see the trace of changes done in service order. Is there any table that fills with the log ?
Basically i'm trying to find log DB table for pricing with this setup.Can anyone pls suggest me to resolve the issue.
Regards
Devika.S

Hi,
there are no change logs for CUMULAT_H object because this is only a temporary object in CRM Order buffer. Check for example the function module CRM_CUMULAT_H_READ_OB. You will find out the this module does not read the CUMULATE_H from the DB cumulates the values by reading the item values. Because of that you will also see that in view CRMV_OBJECTS the change document relevance is not maintained for this object.
So you will not a change entry for CUMULAT_H in CDHDR/CDPOS. As a workaround for your requirement you can read the changes of CRMD_PRICING_I-NET_VALUE from the change document tables or write a change entry on save into a customer field and/or table.
Regards
Nicolai

Firefighter Config change logs / SOD logs are not displayed..

We are on GRC 5.3, SP8. I have configured the SUP and firefighter id's are working fine. However, I am getting the message " No match nor conflict found " when I execute the 'Configuration Change Log report' and 'SOD Violations Report' even though the we changed the configuration and FF id's executed conflicting transactions defined in RAR. ' Log data changes ' box is already activated in the following tables:
1. Configuration (/VIRSA/ZFFCONFIG)
2. Controllers (/VIRSA/ZFFCNTRL)
3. Critical Tcodes (/VIRSA/ZVIRTCODE)
4. Firefighters (/VIRSA/ZFFUSERS)
5. Owners (/VIRSA/ZVIRFFIDS)
6. Reason Codes (/VIRSA/ZFFRCD)
7. Security (/VIRSA/ZVIRFFPWD)
Still the logs are not displayed. Thanks for your help.
Regards,
Raj

Hi Raj,
Can you check the SM37 background job../VIRSA/ZVFATBAK is running or NOT???
Regards'
Gangadhar

Is there any way to download/print/export the CUP Change Log?

Does anyone know if there is a way to export, download, print, etc. the CUP Change Log report? We are on GRC 5.3 SP13.
We have just started an audit review and the Auditors are asking for a report of all changes made since 10/1/2010. I can generate it on the Configuration/Change Log/Search Change Log screen but it doesn't seem to have any export/print options.
If this is not possible, does anyone know what tables make up the Change Log? I may be able to give them a report off of the tables.
Thanks.

Hi Bob,
by default there is no export feature for that one.
To find the right table I only see that you would need to query the tables for one of the entries to find the right one as there is no official DB structure published.
Best,
Frank

Modify Banner with EEM?

Hello,
cause eem could do a lot of chances in the configuration without an operator, I want to inform the operator/admin with the content of the "banner exec" about some important system parameters.
I tried to configure some banners with eem applets, but without success.
Here is an example, section "action"
action 1.0 cli command "enable"
action 2.0 cli command "configure terminal"
action 3.0 cli command "banner exec @"
action 4.0 cli command "some text"
action 5.0 cli command "@"
action 9.0 cli command "end"
I can´t understand the problem cause writing a banner are some simple cli commands. Maybe the response of the initial "banner exec @" command is the problem? Does anyone tried it with success.
Other eem applets are running without problems on the same system.
Regards,
Thilo

You need to answer the interactive prompts, or do a one-line banner. It looks like a single line will work. Try:
action 1.0 cli command "enable"
action 2.0 cli command "configure terminal"
action 3.0 cli command "banner exec @ some test @"
action 4.0 cli command "end"

Log configuration changes to syslog on Nexus 7000?

I need to be able to log any configuration changes to syslog on our Nexus switches. On IOS this is easy with the archive commands, but I'm a little stuck trying to do this on our Nexus gear. On the IOS gear I run the commands:
archive
log config
logging enable
logging size 100
hidekeys
notify syslog
How do I do the equivalent on NX-OS?

Cisco NX-OS can log configuration change events along with the individual changes when AAA command accounting is enabled.
With command accounting enabled, all CLI commands entered, including configuration commands, are logged to the configured AAA server. Using this information, a forensic trail for configuration change events along with the individual commands entered for those changes can be recorded and reviewed.
Because of this capability, it is strongly advised that AAA command accounting be enabled and configured.
Refer to the “TACACS+ Command Accounting” section of this document for more information.
The Nexus 7000, by default keeps a local accounting log of all the configuration commands entered on the device; you can view this with the 'show accounting log' command.
In NX-OS, we changed the way logging works. We keep a local accounting log of all the
configuration changes ("show accounting log"), but if you want to send those logs to a
server, it must be done with through a TACACS server. Please see the below documentation:
Configuring AAA on Nexus
TACACS command accounting
-Thanks
Vinod
**Encourage Contributors. RATE Them.**

Need of Change log deletion for a DSO, when DTP delta Init with Active Tabl

Hi,
Thanks for your time, please help me with the following
Scenario: I have Cube1 being updated from DSO1 with DTP delta, for quite some time. As per new requirement, I would need to create new data mart such that Cube2 gets updated from DSO1.
In order to Configure the delta, I am Considering Following options, please let me know, which one is right one.
Note: DSO1 is in Overwrite Mode.
Create one DTP with update Mode "Delta" , and "Active Table". I knew Delta Changes are captured in change log, but my understanding is, when you execute the DTP for the First time, it fetches the records from Active Table. And from 2nd Run onwards the very "same DTP" without "any changes" get the records from change log, even if we choose "Active Table".
is my understanding is Right?
Do I have to consider deleting the change log, because DSO1 is in Production from quite some time which is in Overwrite mode?
Do I have to create a DTP with Delta and Active Table, run the dtp Once(Init), then choose "Change Log for subsequent runs explicitly
please help me with these. I have reviewed many sap help articles and sdn threads but none of them were helpful. all of them explains, difference b/w active table and change log table, also gives scenarios like use a full DTP and then 2nd DTP with Delta without Data transfer. I am not looking for that kind of details.
Appreciate any help, Thanks again
Edited by: curious maven on Mar 28, 2011 8:35 AM

Hi Uma,
Thanks for your response.
to your question, If I need to load all the data from DSO1 to Cube1, answer is NO. if you read my post once again,
Existing Flow is : DSO1 --> Cube1 (Means, Active Table and Change Logs of DSO1 already Filled Up)
Requirement is: DSO1 --> Cube2. (Need to Init the Delta, and Detlas going forward)
My Questions:
(1) Imagine, DSO1 has 10 requests, so we see resepctive data in Active Table as well as Change Log. As a matter of fact, Data is being updated to DSO1 in Overwrite Mode, so all the changes(10 requests equivalent) would be captured in Change Log, which in turn helpful / used when we do Delta from DSO1 to any Cube, in my case, it used to update to Cube1. As per new requirement, it needs to update to Cube2.
My assumption is, if I choose "Active table and Delta in Extraction Tab" in DTP, During First Run (Delta Init), Data would be fethed from Active table. And the 2nd Run Onwards, delta records would be fetehced from Change Log automatically, even if we don't change the selection from Active Table to Change Log.
Is My Assumption Right?,
in this process, Do I have to Delete Change Log
(2) Do I have to Explicitly change DTP setting from "Active Table to Change Log" Once Delta Init has been run with setting "Active table" inorder to get Deltas from DSO1 --> Cube2 ?
Appreciate your help
Edited by: curious maven on Mar 30, 2011 3:14 PM
Edited by: curious maven on Mar 30, 2011 3:29 PM

Logging CRS configuration changes

Hallo,
in a 10.1 RAC environment,
is there a file which logs CRS configuration changes, like issuing a oifcfg -setif command?
Thx

Yes

Table to display change logs for transaction VK13 with certain condition.

Hi ,
Please let me know if there is any table from which we can get the change log details of condition records with transaction VK13
This is required to get information on old value and new updated value for the condition.
Thanks
Ravi Naik

Hi,
Use the program RV16ACHD (You can run this in SE38)
View the code from there for more understanding.
Tables are
KONH, KONP and CDHDR
In the CDHDR table you can view condition record changes under, Change doc. object = COND_A
Anotehr option is to use the function module SD_CONDITION_CHANGE_DOCS_LOAD which is called in the program RV16ACHD and pass the correct parameters.
Best regards,
Anupa

Tracking change log by workstation ID along with username

Hi All users,
I am using SAP business one 8.8 and want to track changes in the system in such a way that along with user name I want to know, from which workstation (or PC) the user has made changes or created any document? Every PC has its unique IP or ID, can I see this in change log in any way? that from which workstation or client PC, the user has made changes?
Any help is highly appreciated.
Thanks in advance,
Farhan Sufi

Dear Gordon,
Thanks for your reply, Actually I need only workstation ID along with user name when tracking transaction log from the tools option "change log".
I am calling it workstation ID, but you can tell me about any thing from which I can track, from which client or PC the user made any transaction. Whether It gives me computer IP or computer name or any identity of PC by which I can know which PC (among server and clients) is used by user to make any transaction.
Any help is appreciated
Thanks,
Farhan

Configuration change logs with EEM

Similar Messages

Maybe you are looking for