cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
508
Views
3
Helpful
9
Replies

Tacacs audit logs legacy

acapit
Level 1
Level 1

Hello,
I'm trying to enable audit logs on my network device and when I configure the following command I get a warning message
1. aaa accounting commands
2. aaa accounting exec
I get a message that says "Hidden command. Use of this command is not recommended/supported will be removed in the future" (message code "PARSER-5-HIDDEN")
What should I use instead?

Any thoughts?

2 Accepted Solutions
9 Replies 9

M02@rt37
VIP
VIP

Hello @acapit 

For aaa accounting in cisco devices, the recommended and supported commands are associated with specific accounting methods (e.g., "start-stop," "stop-only") and accounting lists. The exact syntax may vary based on your specific device and IOS version...

Basic example using "aaa accounting" with the "start-stop" method for command accounting:

aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+

First command, log the start and stop of EXEC session to the device. When the user logged in and when the user logged out. Total time spent.

The second command, log all the commands executed by the user, that are at privilege level 15.

 

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

I know that as I said when I configure the following commands I get a warning

 "Hidden command. Use of this command is not recommended/supported will be removed in the future" (message code "PARSER-5-HIDDEN"), 

Do you have any other solution?

Please share your aaa configuration 

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

Sadly I cannot share with you my configuration due to my company policy.

aaa accounting commands visible-keys 

try this 

Can I see all aaa config 

MHM

Sadly I cannot share with you my configuration due to my company policy.

aaa accounting commands visible-keys 

Try using this command to see command without mask