Specifications

13-4
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 13 Monitoring Event Logs
Interpreting Event Logs
Interpreting Event Logs
Click the Event Logs link in the Monitoring module to view syslog-based event logs in the admin
console. There are three Event Logs tabs: Log Viewer, Logs Settings, and Syslog Settings.
View Logs
Figure 13-3 shows the Log Viewer pane.
Figure 13-3 Log Viewer Pane
The Log Viewer tab includes the following information:
• System statistics for Clean Access Servers (generated every hour by default)
• User activity, with user logon times, log-off times, failed logon attempts, and more.
• Network configuration events, including changes to the MAC or IP passthrough lists, and addition
or removal of Clean Access Servers.
• Device management events (for OOB), including when linkdown traps are received, and when a port
changes to the Auth or Access VLAN.
• Changes or updates to Cisco NAC Appliance checks, rules, and Supported AV/AS Product List.
• Changes to Clean Access Server DHCP configuration.
System statistics are generated for each CAS managed by the Clean Access Manager every hour by
default. See Configuring Syslog Logging, page 13-9 to change how often system checks occur.
Note The most recent events appear first in the Events column.