topic Re: ERS4900/5900 config audit logging in ExtremeSwitching (ERS)

ERS4900/5900 config audit logging

EF — Mon, 19 Oct 2020 15:41:48 GMT

Hi folks!!

I need enabled audit logging in ERS4900/5900 series, but I not sure if the only option available is enabling enhanced secure mode on switches which is no option due to all changes that introduces in users and password management. Any idea?

Regards

Re: ERS4900/5900 config audit logging

Todd_Hancock — Mon, 19 Oct 2020 19:42:20 GMT

Audit logging is enabled by default - command is : audit log save.
View the logs with command : show audit log.

Re: ERS4900/5900 config audit logging

EF — Mon, 19 Oct 2020 20:04:39 GMT

Thanks Todd, I saw it but, how can i send it to syslog server?

Regards,

Re: ERS4900/5900 config audit logging

Todd_Hancock — Mon, 19 Oct 2020 20:33:26 GMT

Hi EF,
It is automatic.
From the Security manual:
A special area of flash memory reserved for CLI audit stores the command history. Access to this
area is read-only. When you enable remote logging, the audit message is also forwarded to a
remote syslog server, no matter the logging level.

I have always seen the audit log entries on our syslog server.