Unable to determine the reason for this log message

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
  • (Edited)
Happy Friday everyone,

Below is an excerpt from one of my switch logs. I cannot find any reason for the 4:50 NetSight login to the switch. The login which takes place just after midnight is my scheduled daily backup which is the only recurring event that we have scheduled.

Any ideas as to where I can look to find the reason for this second log message would be greatly appreciated.

01/29/2016 04:50:19.76 <Info:AAA.logout> Slot-1: User NetSightCLI logout from xml (xx.xxx.xx.xxx)
01/29/2016 04:50:18.72 <Info:AAA.authPass> Slot-1: Login passed for user NetSightCLI through xml (xx.xxx.xx.xxx)


01/29/2016 00:14:12.67 <Info:AAA.logout> Slot-1: User NetSightCLI logout from telnet (xx.xxx.xx.xxx)
01/29/2016 00:13:29.22 <Info:cli.logRemoteCmd> Slot-1: xx.xxx.xx.xxx (telnet) NetSightCLI: save configuration as-script nms
01/29/2016 00:13:06.32 <Info:cli.logRemoteCmd> Slot-1: xx.xxx.xx.xxx (telnet) NetSightCLI: save configuration primary
01/29/2016 00:13:04.91 <Info:AAA.authPass> Slot-1: Login passed for user NetSightCLI through telnet (xx.xxx.xx.xxx)
01/29/2016 00:13:02.56 <Info:AAA.logout> Slot-1: User NetSightCLI logout from telnet (xx.xxx.xx.xxx)
01/29/2016 00:12:58.79 <Info:AAA.authPass> Slot-1: Login passed for user NetSightCLI through telnet (xx.xxx.xx.xxx)

Thanks,
Photo of David Coglianese

David Coglianese, Embassador

  • 5,944 Points 5k badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of Henrique

Henrique, Employee

  • 10,302 Points 10k badge 2x thumb
Hi David,

This might be related to "Data Polling Interval" which use XML connection to the switch to collect information about device's slots and ports.

You can check in the switch what's the interval among xml access log messages and confirm that number/interval in NetSight:

NetSight Console => Tools => Options => Network Monitor Cache (under Suite Options in the left side)

Then write the interval in minutes for "Data Polling Interval (minutes)" box in the right side



Note: The default value for this option is 720 minutes (12 hours). That means the NetSight might be accessing the switch through XML every 12 hours.
(Edited)
Photo of David Coglianese

David Coglianese, Embassador

  • 5,944 Points 5k badge 2x thumb
Thank you Henrique,

That does appear to be what it is. Polling is set for 720 minutes and I now notice the same message at 4:50 and 16:50.