Configuration Changes logging issue, ASDM related?
I've run into an interesting problem.
ASA: 8.4(2)
ASDM: 6.4(5)
When I make a change at the CLI, syslog message ASA-5-111008 is generated and sent to the syslog servers, local buffer, and ASDM.
When I make a change in ASDM, syslog message ASA-5-111008 is generated and sent to the local buffer and ASDM. It is NOT sent to the syslog server.
Here's my logging config...
Firewall# sh run logging
logging enable
logging timestamp
logging standby
logging buffer-size 409600
logging buffered informational
logging trap notifications
logging asdm notifications
logging host Inside xx.xx.xx.AA 6/1468
logging host Inside xx.xx.xx.BB 6/1468
logging flash-minimum-free 10240
logging flash-maximum-allocation 10240
logging permit-hostdown
Surely I'm missing something obvious. Is this a known bug?
Thanks!
Ha, I did upgrade just a few minutes ago, but same result.
That does look similar, and so does ...
CSCth14248 ASA not sending all logging messages via TCP logging
Looks like I'll need to upgrade to 8.4(3) to fix these and see how it goes.
thanks!
Similar Messages
-
Configuration Change log in Production
Hi all
Some configuration changes have been directly made in production at our client. How can we find out what changes are made? Going into SCC4 > Change logs, I could find out who made all the changes. But it does not show what configuration changes are made.
Thanks
VamsiDear Vamsi,
I'm not sure whether in a single report you can fetch all the changes related to configuration for a particular module.
But I'm sure in most of the nodes the configuration change logs gets recorded.Check these links,
Re: How to find when a new Material type is created
Configuration change Log
Regards
Mangalraj.S -
Hi,
I need to find the configuration change log in development system. Do we have any transaction/report/program from which we can track all the configuration changes for a perticular object.
Thanks,
Vijayfor almost all customizing you can find the change history in menu tools within the cuistomizing.
-
Change Log issues - Post Upgrade
Hi Experts,
We are in the process of Upgrading BW from 3.X to BI 7. As part of this we copied our existing Production system into the sand box and basis did the technical upgrade on the same (Sand Box). Later we ran some post upgrade Jobs as part of the SAP defined Upgrade Process.
1) But after the upgrade i can notice that most of the ODS objects, doesn't have 'Change Log' table in the 'Information (Log/Status)' screen.
2) Even when i try to view the change log content in Manage screen, it gives me a pop up to enter the change log table, instead of directly taking me to the selection screen.
3) When i try to activate a request, even that fails with an SQL error 'SAPSQL_EMPTY_TABNAME'.
Is there any process that has to be run to link the Older version change log tables to the corresponding ODSs after Upgrade?
Has anyone come accross similar issues? If yes, how was it solved? All suggestions are invited.
Thanks and Regards,
JayHI JayaPrasad,
Chek the note : 1059171 which is related to Change log,
I too faced this issue when upgraded to Bi7.0 on SP12, but as soon as SP13 is installed the issue is solved, so I suggest to go for SP 13 for upgrading to Bi7.0.
Regards,
Srinivas -
RPUAUD00 Change Log Issue on Table T585B
I added some new infotypes to the RPUAUD00 change log on tables:
t585a
t585b
t585c
Everything seems to be working as expected, but I received soft errors on t585b:
"! All data fields 0006 01 will be deleted"
when I used * (all fields).
This did not happen when I used actual field names.
Does anyone know what that means?
thanks!It's just a warning for this specific view if you put '*' in field name. What it means is that if you currently configure audit changes
for specific fields of this infotype, all of these entries will automatically be deleted by SAP when you use '*' (all fields are marked for audit). Therefore, there should not be a concern on the message. -
Change log issues-2 images for a single requests
Hi ,
in change log table for a single request i found 2 before images and two after images, is this normal behaviour if not when can we see the such type of scenarios.
because it leads to zero records when it isn updated in to the further data targets.
thanks.the listener is NOT involved with any existing session.
stopping & restarting the listener has NO impact on existing sessions.
I suggest it is better to control network access to any system using a Firewall which is the best tool for this task.
Yes, it is possible to have more than 1 listener. It is also possible to poke yourself in the eye with a sharp pencil.
I suggest that you should avoid both of these possible activities.
Simply put having multiple listeners is wrong for multiple reasons & should be avoided. -
Configuration change logs with EEM
Hi,
I am trying to log all commands executed on the Cisco Router. And it is working fine. However it wont show who executed the commands. It just shows command was executed
*Nov 15 00:38:56.356: %HA_EM-6-LOG: cli-match: configure terminal Command Executed
*Nov 15 00:39:08.060: %HA_EM-6-LOG: cli-match: do-exec sh ip int brief Command Executed
*Nov 15 00:39:08.066: %HA_EM-6-LOG: cli-match: show ip interface brief Command Executed
PE4(config)#
*Nov 15 00:39:12.940: %HA_EM-6-LOG: cli-match: do-exec sh logg Command Executed
*Nov 15 00:39:12.945: %HA_EM-6-LOG: cli-match: show logging Command Executed
I know i can setup using config archive logging for the config change. but my requirement is for show command as well. We use radius for authentication and it is not doing command authorisation and accounting..
If any one know what I can append in so that it can show who executed the command.
thanks
AijazThe CLI command I'm trying to run is "copy runnning-config tftp", but I don't know how to pass variable on the ASA. I know some Cisco IOS you can create environment variable for the EEM to use. The command I'm trying to run requires user input such as: the source file, destination tftp client and the destination file. How to pass that? Or maybe what command can I run to save the config to a remote server?
thanks, -
Change log issue in BRF process workflow SRM 7.0
Hi Experts,
I am new to SRM workflow. At the moment I have a requirement in SRM 7.0 BRF process control workflow.My requirement is to capture the changes done by the shopping cart approver's and also the changes done by shopping cart requestor. Below is an exmaple.
In some cases the first level approver or second level approver will edit the shopping cart , make some changes and will resend the same shopping cart to the requestor (the person who created the shopping cart). If the requestor accepts the same changes and save the shopping cart there is no need of sending the workitem to the first level approval or second level approver again, but incase if the requestor makes new changes to the shopping cart then the workitem should go to the first level approval or the second level approver.
How will the system identify the changes done by the first level approver or second level approver or the requestor?? Because based on the changes the workflow process will follow. Is there any log where the changes done by first level approver or second level approver are saved? and please let me know where to code for this requirement.
Thanks and Regards,
PrashanthNote 868192 - Consulting solution: MM-SRV-SUS service procurement
A service entry in SUS is transferred to the R/3 system or ERP system using an IDoc after you submit the entry screen. Service entry sheets are created there and they are then available for release. You can perform the service entry in a number of ways:
Service entry of planned services: you can confirm planned services in the service entry in SUS. An overdelivery may occur if quantities are still open.
Service entry using time recording: planned services, for which a time recording is useful, can be split up. Time recording by the hour or by the day is possible.
Service entry for limits: You can use the free-text entry of new items and also the OCI-enabled catalogs to implement limits.
verena.kahnert at sap dot com -
Logging CRS configuration changes
Hallo,
in a 10.1 RAC environment,
is there a file which logs CRS configuration changes, like issuing a oifcfg -setif command?
ThxYes
-
Firefighter Config change logs / SOD logs are not displayed..
We are on GRC 5.3, SP8. I have configured the SUP and firefighter id's are working fine. However, I am getting the message " No match nor conflict found " when I execute the 'Configuration Change Log report' and 'SOD Violations Report' even though the we changed the configuration and FF id's executed conflicting transactions defined in RAR. ' Log data changes ' box is already activated in the following tables:
1. Configuration (/VIRSA/ZFFCONFIG)
2. Controllers (/VIRSA/ZFFCNTRL)
3. Critical Tcodes (/VIRSA/ZVIRTCODE)
4. Firefighters (/VIRSA/ZFFUSERS)
5. Owners (/VIRSA/ZVIRFFIDS)
6. Reason Codes (/VIRSA/ZFFRCD)
7. Security (/VIRSA/ZVIRFFPWD)
Still the logs are not displayed. Thanks for your help.
Regards,
RajHi Raj,
Can you check the SM37 background job../VIRSA/ZVFATBAK is running or NOT???
Regards'
Gangadhar -
Is there any way to download/print/export the CUP Change Log?
Does anyone know if there is a way to export, download, print, etc. the CUP Change Log report? We are on GRC 5.3 SP13.
We have just started an audit review and the Auditors are asking for a report of all changes made since 10/1/2010. I can generate it on the Configuration/Change Log/Search Change Log screen but it doesn't seem to have any export/print options.
If this is not possible, does anyone know what tables make up the Change Log? I may be able to give them a report off of the tables.
Thanks.Hi Bob,
by default there is no export feature for that one.
To find the right table I only see that you would need to query the tables for one of the entries to find the right one as there is no official DB structure published.
Best,
Frank -
Log configuration changes to syslog on Nexus 7000?
I need to be able to log any configuration changes to syslog on our Nexus switches. On IOS this is easy with the archive commands, but I'm a little stuck trying to do this on our Nexus gear. On the IOS gear I run the commands:
archive
log config
logging enable
logging size 100
hidekeys
notify syslog
How do I do the equivalent on NX-OS?Cisco NX-OS can log configuration change events along with the individual changes when AAA command accounting is enabled.
With command accounting enabled, all CLI commands entered, including configuration commands, are logged to the configured AAA server. Using this information, a forensic trail for configuration change events along with the individual commands entered for those changes can be recorded and reviewed.
Because of this capability, it is strongly advised that AAA command accounting be enabled and configured.
Refer to the “TACACS+ Command Accounting” section of this document for more information.
The Nexus 7000, by default keeps a local accounting log of all the configuration commands entered on the device; you can view this with the 'show accounting log' command.
In NX-OS, we changed the way logging works. We keep a local accounting log of all the
configuration changes ("show accounting log"), but if you want to send those logs to a
server, it must be done with through a TACACS server. Please see the below documentation:
Configuring AAA on Nexus
TACACS command accounting
-Thanks
Vinod
**Encourage Contributors. RATE Them.** -
Can the ACE be configured for logging configuration changes to syslog server ?
Hi,
On all our routers, switches and firewalls we've configured syslog so we get logs when configuration changes occur.
Is this possible on the ACE too ?
regards,
SebastianHi Sebastian,
Yes it is possible but depends upong the logging level you have set. So logging trap 5 should be able to get you the configuration changes or command execution logs.
Nov 1 2013 11:20:33 : %ACE-5-111008: User 'admin' executed the 'logging buffered 6' command.
Nov 1 2013 11:20:48 : %ACE-5-111008: User 'admin' executed the 'no rserver testlog' command.
So you should see these level 5 logs on syslog if logging trap 5 is configured.
Let me know if you have any questions.
Regards,
Kanwal -
Configure the Change Log for the activity
Hi to all,
I would like to know if it is possible to configure the "change log" for the activity.
Thanks in advanced,
MatteCarlos,
Can you be more specific on the term 'Configure'. Change log is automatically generated by SBO. The only thing you can change is the numbers of Historical instances of the log
Administration > System Initialization > General Settings.......Services Tab...History or Log Settings. Be default it is 99 instances.
Suda -
Vendor Classification Change Log Activate : Configuration Change
Hi,
I want to know what is the process of activate Change Log for the Vendor Classification. Please suggest.
RgdsYou can see in Xk02 / Xk03 transaction - Environment tab - Field changes..
Maybe you are looking for
-
Portrait photos will not sync to iPod Touch!
Hello- When I recently synced my iPhoto library to my 1st generation iPod Touch, it would not sync SOME recent portrait-orientation photos. The photos not synced appeared to be only very recent ones (within the last week or so). Older events and impo
-
I subscribed to the Colbert Report Multi-pass last week and got the first show at that time. Now how do I get the next available show? iTunes says it should just download automatically but the 5/8 show is now available but is not downloading for me.
-
Just some information about why Verizon is not expanding its service to new areas.
http://consumerist.com/2014/03/12/dont-count-on-verizon-fios-coming-to-your-town-anytime-soon/
-
Does my Credit Card information's details have to fully match my Apple ID information?
I'm turning fifteen soon and I've been leeching off my father's Apple ID (This one) for as long as I can remember for apps, music, and generally everything Apple. Only problem is that with iCloud becoming suddenly amazing I want to buy a Macbook Air,
-
How to adjust transition flash ?
hi there, i used a transition called , flash. i find tht the flash is too bright. How do i adjust this transition ? thanks