User Tracking in Essbase 11.1.2.2

My client requires the follwing information from Essbase. I can get the below information when i expand my security and click on display user table. however is there any maxl command which would give the below information in 11.1.2.2 when i say "display user all" it does not provide all the information. Kindly help me.
ServerName
SystemName
ActiveFlag
LoginName
Name
LoginStatus
EmailAddress
ExpiratonDate
LastLoginDate
AdditionalInfo
Regards,
AS

I have written stuff using the API to get that info, as like you, I found that maxl fell short. The old ESSCMD "GETUSERINFO" (which still works in 9.3.1) provides more or less the info you listed
User Name
Description
Email
Locked out (yes/no)
Change the password now (yes/no)
Access Level
Password expiration in days
Last successful login
failed login attempts since then
login id
However that command requires a username e.g. GETUSERINFO testuser;
The gurus on here will probably know for sure if there is a command out there.

Similar Messages

LMS3.2 User Tracking IP Phones Discovery Doesn't Work

I am having difficulty getting the User tracking for IP Phones to work correctly in Ciscoworks LMS 3.2.
Callmanager is version 7.1.5.10000-12. Campus manager version is 5.2.1
The Callmanager publisher and two subscribers are all showing as application servers with green icons under the topology services view.
The callmanagers show as CDP neighbours on the switches to which they are connected.
I can do an SNMP walk of the ccmPhoneTable from the Ciscoworks devicecenter and get a ton of returned data.
The IP phones are discovered as end hosts and have mac address and IP address info when checked in the User Tracking utility.
Callmanager sysObjectID = OID: CISCO-PRODUCTS-MIB::ciscoMCS7835I
Any help you could give with troubleshooting would be greatly appreciated.
Regards
Rob

Thanks Nick,
I had seen that document and been through the processes
The mac and IP addresses of the ip phone are discovered.
The callmanagers are discovered and have green application server icons in the topolgy view
I can do an snmpwalk of the ccmPhoneTable OID and get returned data (as per this post by JClarke https://supportforums.cisco.com/message/664859#664859)
I can't do an snmpwalk of the ccmPhoneExtension as described in that document but I assume that since it applies to campus manager 3.2 and 3.3 that it is a bit dated and not relevant to later versions of callmanager.
I think that I have covered all the basic cdp/snmp and discovery issues. Any suggestions on where to go from here would be appreciated.
Regards
Rob

User tracking not finding any hosts in Ciscoworks LMS 3.1

L.S.
Our test-configuration is as follows:
Application versions:
Ciscoworks LMS 3.1
Ciscoworks Common Services 3.2.0
Campus Manager 5.1.4
We have 31 managed devices in Campus Manager (data has been collected on all),
Edit: All of them show up green in the topology window.
The device are: 2 6509 cores (running IOS s72033_rp-IPSERVICESK9_WAN-M version 12.2(18)SXF8), 1 ASA firewall (running ASA-OS version 8.0.5) and 29 switches (2960 and 3560 models both running ios version 12.2(52)SE). The switches are connected as follows:
User tracking jobs are running normally, but aren't finding any end-hosts or IP phones at all (I suspect around 250-500 hosts+ on these switches)
We are running SNMP v3 on the switches and have added the following configuration items to all the switches:
snmp-server group readonly v3 auth context vlan-1
<repeat for all present snmp-contexts as shown in show snmp context output>
snmp-server group readonly v3 auth context vlan-83
Debugging is enabled in CM->Admin->Debugging Options->User Tracking Server
This is the UT.log file of the last major acquisition:
messages will remian logged to file: D:\PROGRA~1\CSCOpx\log\ut.log
2010/01/13 14:00:01 main MESSAGE ProcessInitializer: Properties will be read from D:\PROGRA~1\CSCOpx\campus\etc\cwsi\ut.properties
I= 0value *.*.*.*
I= 1value 6
I= 2value 1
2010/01/13 14:00:01 main MESSAGE DBConnection: Created new Database connection [hashCode = 10969598]
PartialOrderNode tree dump: time base = VMPSMajor
<root>
    VMPSMajor: <root>
    VMPSMajor:     VMPSMajor.GetXMLData
    VMPSMajor:         VMPSMajor.PingSweep
    VMPSMajor:         VMPSMajor.PopulateFromDCR
    VMPSMajor:             VMPSMajor.GetPortStatus
    VMPSMajor:                 VMPSMajor.GetBridgeTable
    VMPSMajor:             VMPSMajor.Sweep
    VMPSMajor:                 VMPSMajor.GetIpXlateTable
    VMPSMajor:                 VMPSMajor.GetIpv6XlateTable
    VMPSMajor:                     VMPSMajor.GenerateTable6
    VMPSMajor:                         VMPSMajor.GenerateTable
SMFunction evaluation order: time base = VMPSMajor
VMPSMajor.GetXMLData Major
VMPSMajor.PingSweep Minor
VMPSMajor.PopulateFromDCR Major
VMPSMajor.GetPortStatus Minor
VMPSMajor.Sweep Major
VMPSMajor.GetBridgeTable Minor
VMPSMajor.GetIpXlateTable Minor
VMPSMajor.GetIpv6XlateTable Minor
VMPSMajor.GenerateTable6 Major
VMPSMajor.GenerateTable Major
Time base VMPSMajor has 5 major nodes and 3 minor traversals.
log4j:ERROR No appenders could be found for category (CTM.common).
log4j:ERROR Please initialize the log4j system properly.
In classlist loader
In classlist loader processing sub classes
updation done
In classlist loader completed
2010/01/13 14:00:03 main MESSAGE DBConnection: Created new Database connection [hashCode = 12524859]
Calling default
Subnet to SubnetData Map Size :73
2010/01/13 14:01:31 DBConnecton-Reaper MESSAGE DBConnection: Closed Database connection [hashCode = 12524859]
2010/01/13 14:01:31 DBConnecton-Reaper MESSAGE DBConnection: Closed Database connection [hashCode = 10969598]
2010/01/13 14:04:50 main MESSAGE DCRDevWrapper: Closing DCRProxy
I'm slowly getting to a dead end here. What am I missing?

Well, our problem was resolved finally through a weird coincendence after having a websession with a Cisco TAC engineer (TAC case SR 613376661)
We changed the
snmp-server group readonly v3 auth context vlan-xxxx
commands in the switches to:
snmp-server group writeonly v3 auth context vlan-xxxx
that is: use the writestring in the snmp-server groups instead of the read string.
After we changed that, all of the User Tracking mysteriously started working.
As far as I know, the writestring should not be needed, but apparently it is....
Is there any explanation for this?

How to get Active users list in Essbase 6.5.6

Hi Gurus,
How to get Active users list in Essbase 6.5.6 version
I dont find any Esscmd to find active users list....
i used LISTLOGINS command in ESSCMD but its not helping me out....
pls suggest me some approach to find active users list.
Thanks in advance....

Hi ,
Display sessions will give only active users details which are currently connected to the ESSBASE .
if you need this list ? or you need the total list of security active users list ?
if you need the currently connected to the ESSBASE
if you check one server At a time or you can check the application level also
1)server level
display session all;
2)application level
display session on application 'application name ';
go for the run command ---> essmsh-----> login;----->enter user name ----> enter password----->enter host (like server name ) then you need to you above 1 &2 commands
Thanks,
suresh

Campus manager user tracking problem

Hi We are using LMS 3.0.1 and the campus manager verson is 5.0.2. We have two subnet which are used for the management ip of switch kept in two different geographical areas. I have made the entry of all devices kept in both subnets and all the devices are know device in DCR, RME and DFM. also after data collection the devices are shown in campus manager database. But I am not able to learn the end host details of the hosts connected to one of our segment.
even if the perticular subnet is not appearing in "campus user tracking" as well as the devices belongs to the subnet. but I am getting all end host details from the second subnet.
please help.

Hi clarke,
i have updated the cm to the latest but still it did not learn. Later i added the 10.188.7.x ip addresses manually in the discovery settings instead of " *.*.*.* " - ip range. Now i am able to see these devices in topology view > layer 2 veiw as connected devices & not seen in unconnected..
Now i need to see the hostname, ip address etc details of these segments in UT acquisition window.... Secondly in topology view, the core switch is showing in "?" question mark symbol. This device is WS-C6509-E (sup-bootdisk:s72033-ipbase-mz.122-33.SXH3a.bin). I tried to delete this device from common services and added it again, there i selected "ws-c6509", i did not see the " ws-c6509-E".
in Cisco site, the serial number of the device is showing as the device "VS-C6509E-S720-10G"
Can u pls help me on this..
regards
rajesh

Non-admin user cannot access Essbase server level variables

Version 11.1.1.3
Essbase Substitution variables are created at server level. Users are getting error in FR report that uses the Subsitution Variable -- Essbase Error(1051085): You do not have sufficient access to get this substitution variable. Also, users cannot access Substitution variable in SmartView. However, users can access variables created at database level. Users are provisioned as "Server Access" to Essbase and filter access to ASO application "MGTRPTG", where MGTRPTG is an ASO essbase application for reporting. We tried the same provisioning in two other environments and it seems to be working fine.
User is type "Essbase and Planning" provisioned with essbase "server access", application mgtrptg "filter", Reporting and Analysis "analyst", "dynamic viewer" and "Explorer". In addition, it is given a filter "REP_DME_GALB" which restricts 2 dimensions (Division and Geography).
Steps taken to resolve:
1. Existing users were deprovisioned and reprovisioned with no effect.
2. Created brand new identically provisioned users in Prod and QA. QA user can access the server level var and Prod user cannot
3. Created a brand new server level variable in Prod and this cannot be accessed.
4. All services have already been restarted several times.
5. SR has been opened.
Temporary workaround:
By creating a duplicate of the same set of variables at the database level, the reports work. This can only be a temporary workaround as the client cannot be expected to maintain two sets of substitution variables since there are 3 applications using these server level variables.
Thank you for any ideas!
Jennifer

You have stumbled on a defect which is resolved in the Hyperion Planning 9.3.1 patch 6 and above. If you have your planning preferences set to indent members it will cause forms which have page selections to show as invalid in SmartView.
You can either patch Planning or turn off the preference. The patches are available from http://metalink3.oracle.com and require account which has been associated with your client ID.
P.S. Usually it's not a good practice to use the admin id.
Regards,
-John
Edited by: Jbooth on Nov 3, 2008 2:12 PM

User Tracking in LMS 3.0.1

Hello Clark,
I have read the user guide for the CM 5.0 for Tracking users and also i have read the Understanding UTLite,I can't see the users login???
what can be the possible reason i have missed.
Thanks

Hello Clarke,
The domain administrator made a mistake in specifying the details in DC,i just added,I have less windows knowledge,where to find the logon scripts files for step 3 in windows 2003 server.as per the campus manager user guide .
Edit the UTLiteNT.bat file:
a. Open the UTLiteNT.bat file.
b. Locate the following line and replace domain and ipaddress with the domain name of the Windows
domain controller and IP address of the computer running the Campus Manager server:
start %WINDIR%\UTLite33 -domain domain -host ipaddress -port 16236
If port 16236 is already in use, enter a different number. This port number must match the number
that you entered in the Use Port Number field, in the User Tracking > Administration >
Acquisition > Acquisition Settings page.
For more details, see Modifying Acquisition Settings, page 7-10.
Step 3 Edit the logon script files to run the UTLiteNT.bat file when users log into the network by adding this
line:
UTLiteNT.bat
Thanks,

Financial Reports User Tracking

Hi Guys
Can any one tell me how to track the user login, report modification, creation and deletion kind of activities in FR--System 9.X??
Appreciate your inputs..
Thanks
Jagan

Thanks for your response.
Can you explain how can we set up this user tracking for FR and WA reports. I think this usage tracking is only for IR reports.
Really appreciate if you can share your experiance on this...
Thanks
Jagan

LMS4.1 user tracking not sortable

in LMS 4.1, under Monitor->Identity Dashboard, i have "user tracking summary" as a portlet, which tells me i have ~ 17,000 users. when i click the report, it pops up a screen that shows mac address, ip address, hostname, subnet, etc.
If i try to do ANY filtering, it returns 0 records. this could be from a specific IP, mac address, device name, or subnet. i have tried every type of record. every filter i attempt always ends with 0 records returned, even though in the unfiltered list they show up. It would be problematic to manually sort through 17,000 users looking for the particular records i need without the ability to use the filter.
can anyone provide an example of how to filter the User Tracking report? is there some feature in LMS i don't own or have enabled to allow this filtering?
thanks!

I can't disagree with your logic, I guess I just assumed such an enterprise solution (that is FAR from cheap) wouldn't require an export of my close to 20,000 records to a .csv in order to do simple sorting.
I will continue to look for a solution within the application, but if worse comes to worse i guess an export could suffice for some of what i'm trying to do.

LMS 3.2 and user tracking problem

rme 4.3.1
cm5.2.1
cv 6.1.9
dfm 3.2.0
ipm 4.2.0
portal 1.2.0
cs 3.3.0
cwasst 1.2.0
running on windows server 2008.
This was a clean bulid, and we imported all pertinent data from our old lms 2.6 server. This was in september 2010. Everything worked as expected and continues to work except for......
We are in an upgrade cycle for our 4500s. We are upgrading from 12.2.50-sg4 to 12.2.50-sg8, and also upgrading rommon to 12.2.31r-sga4.
It appears that user tracking is not working anymore for the upgraded 4500s. UT still runs, and works perfectly for all other devices, including the 4500s that have not been upgraded yet. I know this sounds goofy, but it really does seem to be the common denominator. I've checked the windows updates, package updates, etc in trying to figure out what made this happen. It really does all come back to upgrading to the above version. All aspects of this server are running great and as expected, it's just that UT for the upgraded 4500s isn't working anymore. I do run the logbackup script weekly (past experience has taught me to do this), and try and keep up with any patches or package updates, etc.
If anyone has seen something similar or can suggest anything, I'd appreciate it. I think I am going to have to open a case on this. Thanks - chris

Michel,
Indeed, it looks like that is the problem. I guess I was focused in on CW rather than the whole picture. But yes, indeed, if I walk the mac table for a vlan on a 4500 that has not been upgraded it works. If I do the same on an upgraded one, I get nothing.
The cautious optimism is that we do have a sup6 at our DR location that is running 12.2.53-sg1 and this test works on that switch. So as long as that
version isn't deferred, we'll test that on one of the older sups to verify.
So thanks for the help, I appreciate it - chris

Prime Infrastructure 2.0 and User Tracking

Hello
I'm having a look at getting wired User Tracking working on Prime 2.0. I checked that it is supported in the following link:
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps6504/ps6528/ps12239/guide_c07-729089.html
I'm having a problem getting dynamic user tracking working for wired non-802.1x clients. The switches are configured for mac-notification traps and the config works fine for LMS.
Another LMS User Tracking feature I'd link to get working in Prime 2.0 is CUCM intergartion where Prime would pull IP Phone extensions/names etc from CUCM.
Are either of these User Tracking features supported in Prime 2.0 (or at least roadmapped) or should I stick with LMS 4?
Thanks
Andy

I am gettng good non-802.1x wired user tracking info. see the screenshot below (click to expand).
I don't have a CM so I can't comment on that bit.
Row 1 in the screenshot, for example, is confirmed with the following CLI output:
User_Access#sh run int fa1/0/41
Building configuration...
Current configuration : 177 bytes
interface FastEthernet1/0/41
description user access
switchport access vlan 10
switchport mode access
snmp trap mac-notification change added
spanning-tree portfast
end
User_Access#sh mac address-table | i 1/0/41
10    000f.b58e.3732    DYNAMIC     Fa1/0/41
User_Access#sh inv
NAME: "1", DESCR: "WS-C3750-48P"
PID: WS-C3750-48PS-S   , VID: V10 , SN: FDO1425X2M9
User_Access#sh ver | i bin
System image file is "flash:/c3750-ipservicesk9-mz.122-55.SE5.bin"
User_Access#

LMS 4.0.1 and User tracking with SNMP v3

Hi! (again )
I've another problem with our new LMS 4.0.1.
We manage our devices with SNMP v3 but the user tracking don't want to work flawlessly.
I've attached an example from our SNMP configuration. Basicly it's the same in our devices.
1st the problem was that no matter what I did the User tracking didn't want to find any host. I left it and worked on something else. After 2 weeks suddenly appeard couple of thousand end host.
As earlier (LMS 2.6 or 3.2 with snmp v2) it is the same that LMS cannot differentiate normal end host and IP Phones although we have several thousand from both. But this is only one problem.
The other is that there are switches with the same IOS and SNMP configuration and from one I get the UT data and from another one I didn't get anything. Only from some 4506 (aprox. 12-15) and 6506 (2) works and we have 20+ 4506 and 10+ 6506. Not to mention the other switches (couple of houndred 2960 and 3750).
I'll be grateful if somebody could advice what to do.
Thanks
Gabor

Understanding Debugger Utility
The utility displays a report on the reasons why User Tracking failed to discover end hosts on specific ports.
In many cases, User Tracking may not perform as expected. This may be because of problems in other LMS applications. For instance LMS Server may have devices that are not discovered or inadequate VLAN discovery in Topology Services.
You can run the utility to troubleshoot problems, or provide the report and log generated by the utility when you contact TAC for help in diagnosing problems.
The debugger utility uses the data collected by LMS Server and reports the reasons for the missing ports in User Tracking.
This tool also has an SNMP component embedded which runs an SNMP query for the table as a part of verification for SNMP failure. For example, SNMP bugs in Catalyst operating system because of which User Tracking may fail to discover devices.
This generates an Action Report that you can use to analyze the data.
The Debugger Utility:
1. Checks the switch ports in a sequential order.
2. Reports violation of basic rules for each of the missing ports such as link ports and trunk ports.
3. Checks for SNMP retrieval of data, if the ports pass the validity check.
4. Generates an Action Report suggesting possible remedial actions to retrieve the valid missing ports.
Using Debugger Utility
The Debugger Utility is available at $NMSROOT/campus/bin/ (where $NMSROOT is the directory where you have installed CiscoWorks).
To run the Debugger Utility, run the command:
utdebug -switch switch-ip -port port1[,port2 ...] [-export filename]
where,
switch is the switch to which the end hosts are connected.
ports are the ports on the switch which have missing end hosts User Tracking.
-export filename specifies that the debug messages be stored in the file specified. If this option is not used, the messages are displayed on the console.
For example,
utdebug -switch 10.29.6.12 -port 5/12
utdebug -switch 10.29.100.10 -port Fa0/10
utdebug -switch 10.29.6.14 -port Gi6
Pretty sure you will find this and perhaps more in the build in help of LMS
Cheers,
Michel

User Tracking - Application error: URN_NOT_FOUND

hello
running ciscoworks 3.2 on Windows 2008 SP2 - installed apps are:
1. Campus Manager 5.2.1
2. CiscoView 6.1.9
3. CiscoWorks Assistant 1.2.0
4. CiscoWorks Common Services 3.3.0
5. Device Fault Manager 3.2.0
6. Integration Utility 1.9.0
7. Internetwork Performance Monitor 4.2.0
8. LMS Portal 1.2.0
9. Resource Manager Essentials 4.3.1
When I run a quick report in Campus Manager (User Tracking > Reports) I get the following error appearing in a window:
Application error: URN_NOT_FOUND : urn "ogs_server_urn" : Not found !!.
Acquisition is working fine – on completion it states how many new hosts have been discovered but I get the above error when I try running a report.
Reloaded server but problem persists. I’ve attached the output of pdshow and the cmapps log - any advice/guidance appreciated.
Thanks
Andy

Hello,
I have the same problem.
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Tabla normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
LMS2.6
could anybody help me?
I attach the ctm_config.txt file.
Thanks

LMS 3.2 gives Application error during Campur User tracking

Hi All,
As per the subject during Campus User Tracking following error comes.
Application error: URN_NOT_FOUND : urn "ogs_server_urn" : Not found !!..
Please let me know if anybody has solution for this.
Thanks in advance.
Samir

this looks like CSCsz79649
I assume at least one of the ctm_config.txt files became corrupted.
have a look at the file ctm_config.txt in both these locations:
    NMSROOT/MDC/tomcat/webapps/campus/WEB-INFlib
    NMSROOT/MDC/tomcat/webapps/cmapps/WEB-INF/lib
and compare the content to the clean files Joe posted in this thread:
    https://supportforums.cisco.com/message/3153454#3153454
Note: the parameter DYNAMIC_PORT_ALLOCATION=0 can be added to both files;
If your files (or at least one) are different, then stop the daemon manager. When services are stopped, replace the corrupted file with the one Joe posted. Also move the ctmregistry and ctmregistry.backup files in these directories to a location outside NMSROOT (like C:\Windos\tmp)
Restart the daemon manager.
If everything is working you can remove the ctmregistry and ctmregisry.backup files you previously moved to C:\Windows\tmp

User tracking problem - lms 3.2

Noticed a pretty weird one. LMS 3.2 on windows 2008.
Everything had been running normally. A while back we noticed the user tracking
tables diminishing, and found out it was due to a bug in the code we were running
on our 4500s. So we started an upgrade cycle and the tables started growing again.
UT runs fine, but there is nothing newer than Feb 25th. Even if I do a manual UT discovery
it seems to run fine, but there are no new entries in the table, or rather nothing with the
last seen date of today when I just ran it.
I did do the usual, run the logBackup script, clean some other log files, I even rebooted
the server, but it still doesn't update with any new UT entries. I have checked and can
do snmpwalks per vlan on the cam tables, so I don't believe it's anything with the switches,
I think this is something within UT or campus.
I would be happy to send up any log files that might be useful. Thanks - chris

Gaganjeet,
that's interesting (and frustrating). In the screenshot I sent yesterday, the UT count is 12500. We should be well over 13000 end hosts.
In doing a search through the UT.log, one of the IPs that is not showing up when I search user tracking is:
2011/03/28 10:02:06 EvalTask-vmpsadmin-05 VmpsAdminSMFGetIpXlateTable: router=10.255.3.130 ip=10.242.9.15
mac=00-19-99-91-a1-14 subnet=10.242.9.0 mask=255.255.255.0 vtp=PETERSACC_10.255.3.130(T) vlan=PETERS-C-USER-1
vlan Index=1709
It is clearly in the logfile. But if you refer to the attached screenshot titled peters-ut-screenshot, if I search on just 10.242, I get
"no end hosts found". This site was brought online a couple weeks ago.
The second screenshot, titled PACS-subnet, shows no end hosts found. This is due to the SW bug we found in 12.2.50-sg8 and
the entries already having been purged. This switch was upgraded to 12.2.53-sg3 on March 14th so the entries should be showing
up. I have not searched ut.log for this subnet. The bug we found with 12.2.50-sg8 was that an snmpwalk of the mac tables, per vlan,
returned nothing. With 12.2.53-sg3, an snmpwalk of the mac tables per vlan does return the mac tables per vlan.
The third screenshot is just searching on 10.255, which covers our datacenter. While there are a lot of entries, the "last seen" date
is Feb 25th. As these servers are always on, I would expect to see the last seen date as yesterday when the last ut run was executed.
I have not searched ut.log for any of these entries.
So it does indeed appear that the ut discovery finds the end hosts. But when you pull up the user tracking utility to search, there is nothing newer
than February 25th. I hope this helps.
Thanks again for the help, I appreciate it - chris

User Tracking in Essbase 11.1.2.2

Similar Messages

Maybe you are looking for