User manual

Software Authentication Manager Commands on Cisco IOS XR Software
show sam log
SR-222
Cisco IOS XR System Security Command Reference
show sam log
To display the contents of the Software Authentication Manager (SAM) log file, use the show sam log
command in EXEC mode.
show sam log [lines-number]
Syntax Description
Defaults The show sam log command without a lines-number argument displays all the lines in the log file.
Command Modes EXEC
Command History
Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper
task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on
Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
The SAM log file records changes to the SAM tables, including any expired or revoked certificates, table
digest mismatches, and SAM server restarts.
Examples The following sample output is from the show sam log command:
RP/0/RP0/CPU0:router# show sam log
06/16/02 12:03:44 UTC Added certificate in table root/1 CN = Certificate Manage, 0x01
06/16/02 12:03:45 UTC SAM server restarted through router reboot
06/16/02 12:03:47 UTC Added CRL in table CN = Certificate Manage, updated at Nov 10, 2001
04:11:42 GMT
06/16/02 12:03:48 UTC Added certificate in table mem:/1 CN = Certificate Manage, 0x1e
06/16/02 12:16:16 UTC SAM server restarted through router reboot
06/16/02 12:25:02 UTC SAM server restarted through router reboot
06/16/02 12:25:04 UTC Added certificate in table mem:/1 CN = Certificate Manage, 0x1e
06/16/02 12:39:30 UTC SAM server restarted through router reboot
06/16/02 12:40:57 UTC Added certificate in table mem/1 CN = Certificate Manage, 0x1e
33 entries shown
Each line of output shows a particular logged event such as a table change, expired or revoked
certificates, table digest mismatches, or SAM server restarts.
lines-number (Optional) Number of lines of the SAM log file to display, in the range from 0 to
200, where 0 displays all lines in the log file and 200 displays the most recent 200
lines (or as many lines as there are in the log file if there are fewer than 200 lines).
Release Modification
Release 2.0 This command was introduced on the Cisco CRS-1.
Release 3.0 No modification.
Release 3.2 This command was supported on the Cisco XR 12000 Series Router.