By default, RADIUS system log files are located in the RADIUS database directory. You can specify an alternate destination directory in the [Configuration] section of the radius.ini file.
Using the Accounting Log
RADIUS accounting events are recorded in the accounting log file. Accounting events include START messages, which indicate the beginning of a connection; STOP messages, which indicate the termination of a connection; and INTERIM messages, which indicate a connection is ongoing.
Accounting log files use comma-delimited, ASCII format, and are intended for import into a spreadsheet or database program. Accounting log files are located in the RADIUS database directory area by default, although you can specify an alternate destination directory in the [Configuration] section of the account.ini file. Accounting log files are named yyyymmdd.act, where yyyy is the four-digit year, mm is the month, and dd is the day on which the log file was created.
The current log file can be opened while RSA RADIUS Server is running.
Accounting Log File Format
The first six fields in every accounting log entry are provided by
RSA RADIUS Server for your convenience in reading and sorting the file:
XDate - the date when the event occurred
XTime - the time when the event occurred
XRAS-Client- the name or IP address of the RADIUS client sending the accounting record
XRecord-Type- START, STOP, INTERIM, ON, or OFF, the standard RADIUS accounting packet types
XFull-Name- the fully distinguished name of the user, based on the authentication performed by the RADIUS server
XAuth-Type- a number that indicates the class of authentication performed:
By default, the standard RADIUS attributes follow the Auth-Typeidentifier. See “Standard RADIUS Accounting Attributes” on page 79.
You can include vendor-specific attributes if the device sending the accounting packet supports them. For more information on using vendor-specific attributes, refer to the RSA RADIUS Server 6.1 Reference Guide.
