When Events Are Logged

Password Modified Events

Password modified events (Privilege, Maintenance, Login, Remote) are logged whenever the associated password is modified with a SET/DEFINE/CHANGE command. A single event is logged for each UI command (only one event is logged for a CHANGE command). SET commands cannot be distinguished from DEFINE commands. If a user sets the password to the existing value, an event is still logged.

User Privilege Level Modified Events

User privilege level modified events are logged whenever a user does a SET PRIV command and successfully provides the privilege password at the Password> prompt. If the user is already privileged, the event is still logged.

SNMP Community Modified Events

SNMP community modified events are logged whenever a user adds or deletes an SNMP community string on the access server. They are also logged if an existing community’s access capabilities are modified (SET SNMP COMMUNITY PUBLIC SET ENABLE). If the user sets the community to existing values, an event is still logged. A single event is logged for each UI command (only one event will be logged for a CHANGE command). SET commands cannot be distinguished from DEFINE commands. If a user does a CLEAR/PURGE SNMP COMMUNITY ALL, a single event will be logged.

23-10 Accounting