To use Command Script Tool is necessary to configure a username and password in NetSight Authorization/Device Access and Profiles/Credentials-->CLI Credentials.
How can I to hidden my password on CLI Credentials to that another person don't see it?
How can I to hidden my password on CLI Credentials to that another person don't see it?
I think you could disable the feature "Show Passwords in Clear Text" for all of your user groups. Then you would also have to figure out how to make it so that nobody else can turn on this feature, i.e. you have to play with the settings under Authorization/Device Access to get what you are looking for.
When I need to use this feature I use my username and password for the CLI config. Then I go in and change it to something else when I am done. Not ideal because another admin can see my stuff while I am doing the work but at least that way I minimize my exposure.
When I need to use this feature I use my username and password for the CLI config. Then I go in and change it to something else when I am done. Not ideal because another admin can see my stuff while I am doing the work but at least that way I minimize my exposure.
OK so the requirement changed from "not see pw" to "track who changed the config".
I assume you not only want to see who changed the switch config but also what was changed = logg the complete CLI commands that were used by that user.
In the Netsight Console log you could see which Netsight user has executed the script tool,
In this case the root user but you also could see the hostname of the PC=AT00298W,
If you now enable syslog logging on your devices you'd send all CLI changes to Netsight....
I know that isn't a great solution to your problem as you'd need to manualy search for the Netsight user and which changes were done.
Might be that someone else has a better idea.
Ron
I assume you not only want to see who changed the switch config but also what was changed = logg the complete CLI commands that were used by that user.
In the Netsight Console log you could see which Netsight user has executed the script tool,
In this case the root user but you also could see the hostname of the PC=AT00298W,
If you now enable syslog logging on your devices you'd send all CLI changes to Netsight....
I know that isn't a great solution to your problem as you'd need to manualy search for the Netsight user and which changes were done.
Might be that someone else has a better idea.
Ron
