Cisco Cisco NAC Appliance 4.1.0
![Cisco](https://files.manualsbrain.com/attachments/7380d0050044647c30f5c24bbbf5d0c0b6d9bb84/common/fit/150/50/faa183d287233c52228cfea3dbc2a127fe780f60564fcb0955d9c3d1cd23/brand_logo.png)
14-13
Cisco NAC Appliance - Clean Access Manager Installation and Administration Guide
OL-12214-01
Chapter 14 Monitoring
Interpreting Event Logs
Interpreting Event Logs
Click the Event Logs link in the Monitoring module to view syslog-based event logs in the admin
console. There are three Event Logs tabs: View Logs, Logs Settings, and Syslog Settings.
console. There are three Event Logs tabs: View Logs, Logs Settings, and Syslog Settings.
View Logs
shows the View Logs pane.
Figure 14-6
View Logs Pane
The View Logs tab includes the following information:
•
System statistics for Clean Access Servers (generated every hour by default)
•
User activity, with user logon times, log-off times, failed logon attempts, and more.
•
Network configuration events, including changes to the MAC or IP passthrough lists, and addition
or removal of Clean Access Servers.
or removal of Clean Access Servers.
•
Switch management events (for OOB), including when linkdown traps are received, and when a port
changes to the Auth or Access VLAN.
changes to the Auth or Access VLAN.
•
Changes or updates to Clean Access checks, rules, and Supported AV/AS Product List.
•
Changes to Clean Access Server DHCP configuration.
System statistics are generated for each CAS managed by the Clean Access Manager every hour by
default. See
default. See
to change how often system checks occur.
Note
The most recent events appear first in the Events column.
describes the navigation, searching capabilities, and actual syslog displayed on View Logs.
Log
filtering
display
Event
column
column
search text
field
field
criteria
filtered event
indicator
indicator