topic RE: CLI history to syslog in ExtremeSwitching (Other)

CLI history to syslog

Curtis_Parish1 — Fri, 05 Dec 2014 05:19:00 GMT

For auditing purposes we need to track the commands entered on our enterasys switches and routers. Is there an easy way to send the commands entered via CLI to the syslog server.

RE: CLI history to syslog

Rex — Fri, 05 Dec 2014 08:40:00 GMT

I think you can use following command to enable the cli command to log, and then you can configure and enable syslog server

enable cli-config-logging

RE: CLI history to syslog

Curtis_Parish1 — Fri, 05 Dec 2014 09:53:00 GMT

According to the S-Series CLI Reference that is not a valid command
.

RE: CLI history to syslog

Drew_C — Fri, 05 Dec 2014 21:57:00 GMT

That's an EXOS command 😉
Let me see what I can find out for you, Curt.

RE: CLI history to syslog

Alex24 — Fri, 05 Dec 2014 22:08:00 GMT

For the N,S or K series you can raise the logging level for "Security" which which will log configuration commands to the log buffer and syslog. The command is "set logging application Security level 8"

RE: CLI history to syslog

Larry_Baker — Fri, 05 Dec 2014 22:09:00 GMT

The S Series will only log commands that create configuration changes..

The two commands you are looking for to enable the most verbose logging of command line actions on the S and K series are (this assumes you already have a syslog destination configured);

set logging application CLI level 8
set logging application Security level 8

The 'Security' application will log when (and which) users log in and out. The 'CLI' application will log what commands are entered that are configuration changes.

Logging ALL cli commands would need to be a feature request.

Best Regards,
Larry

RE: CLI history to syslog

Curtis_Parish1 — Fri, 05 Dec 2014 23:15:00 GMT

Thanks! Config changes should be all that is necessary to log