Cisco Acs 57 User Guide

							39   
Managing Alarms
Understanding Alarm Syslog Targets
4.Click Submit.
Related Topics
Understanding Alarm Syslog Targets, page 37
Deleting Alarm Syslog Targets, page 39
Deleting Alarm Syslog Targets
Note: You cannot delete the default nonstop schedule.
To delete an alarm syslog target:
1.Choose Monitoring Configuration > System Configuration > Alarm Syslog Targets.
The Alarm Syslog Targets page appears.
2.Check the check box the alarm syslog target that you want to delete, then click Delete.
The following message appears:
Do you want to delete the selected item(s)?
3.Click Ye s.
The Alarm Syslog Targets page appears without the deleted alarm syslog targets. Use Advanced Syslog Options
Port Port in which the remote syslog server listens. By default, it is set to 514. 
Valid options are from 1 to 65535.
Facility Code Syslog facility code to be used for logging. Valid options are Local0 
through Local7.
Table 138 Alarm Syslog Targets Create or Edit Page
Option Description 
						

							40
Managing Alarms
 
Understanding Alarm Syslog Targets 
						

							1
Cisco Systems, Inc.www.cisco.com
 
Managing Reports
The reports in Cisco Secure ACS, Release 5.7 are enhanced to have a new look and feel that is more simple and easy to use. 
The reports are grouped in to logical categories to provide information related to authentication, session traffic, device 
administration, ACS server configuration and administration, and troubleshooting. The enhanced dynamic export option allows 
you to export the selected reports to an excel spreadsheet as a comma-separated values (.csv) file. The enhanced scheduling 
service allows you to queue reports and receive notification when the reports are available.
ACS 5.7 uses the flex based web interface to display reports. The new reports web interface in ACS 5.7 generates the RADIUS 
and TACACS+ reports three to four times faster (on an average) than ACS 5.5 reports. The report names and their filters are 
displayed on the left-hand side and the reports are displayed on the right-hand side of the Reports web interface. The enhanced 
web interface help you to navigate through the reports easily and to have a better control over different types of reports from 
left-pane, than going to the right-pane and make selection. ACS 5.7 does not support the Interactive Viewer feature as a whole; 
however, the “show or hide columns” and “fixing columns” (constituents of Interactive Viewer feature) are supported. You can 
export the report to a comma separated values file, open the file using Microsoft Excel Spreadsheet or using any other 
supported tool, and use the excel options to perform the operation.
The Monitoring and Reports drawer appears in the ACS web interface and contains the Launch Monitoring and Report Viewer 
option. Click Launch Monitoring and Report Viewer to open the Monitoring and Reports Viewer in a new window, which 
contains the following drawers:
Monitoring and Reports
Monitoring Configuration. (See Managing System Operations and Configuration in the Monitoring and Report Viewer, 
page 1.)
The Monitoring and Reports drawer on the web interface contains the Reports option. Click Reports to open the Reports Viewer 
in a new window.
You can run reports from Reports Web interface from any of the following pages:
Favorites—Reports > Favorites
ACS Reports—Reports > ACS Reports > 
Saved and Scheduled Reports—Reports > Saved and Scheduled Reports
The reports that reside in these pages can be:
System reports—Preconfigured with the ACS software; you can view the list of system reports in the Reports > ACS Reports 
pages.
Customized reports—System reports that you have configured and saved.
For easy access, you can add reports to your Favorites page, from where you can customize and run reports. You can customize 
the reports and save them to access them frequently and run the customized reports. The saved reports are displayed under 
the Saved and Scheduled Reports drawer. The ACS Reports provide a rich set of reports on log, diagnostic, and troubleshooting 
data retrieved from the ACS servers in your deployment. You can view these reports as tables, graphs, or charts and drill down 
further for more granular data.
Further, ACS allows you to:
Filter the data in your report based on your requirements 
						

							2
Managing Reports
 
ACS Reports
Add the reports periodically or on demand to a comma separated values file and print it
Add the report to your list of favorites, from where you can access them frequently
Customize a report and save it.
This chapter covers the following topics:
ACS Reports, page 2
Running Reports, page 3
Reports Navigation, page 3
Exporting Reports, page 8
Saving and Scheduling Reports, page 8
Favorite Reports, page 13
Available Reports, page 14
Available Filters, page 18
Changing Authorization for RADIUS Active Sessions Dynamically, page 21
Understanding Charts, page 23
ACS Reports
The Monitoring and Reports Viewer offers you a powerful dashboard that you can use to monitor the health of all ACS servers 
in your deployment. The dashboard also provides information on network access patterns and trends in traffic that you can use 
to administer your network efficiently. The Monitoring and Report Viewer provides you real-time data and vital statistics that help 
you proactively manage your network and prevent any attacks.
The Monitoring and Report Viewer component of Cisco Secure ACS collects log and configuration data from various ACS 
servers in your deployment, aggregates it, and provides interactive reports that help you analyze the data. It also provides you 
integrated monitoring, reporting, and troubleshooting capabilities to efficiently manage your network and troubleshoot 
network-related problems.
ACS comes with a set of predefined reports that you can run to obtain meaningful information from the log and configuration 
data obtained from ACS servers. Table 2 on page 15 lists the reports that are available in ACS under various categories. The 
report names and its filters and displayed in the left-pane. You can add or remove filters and run a report. The generated report 
appears on the right-pane. 
Related Topics
Running Reports, page 3
Reports Navigation, page 3
Available Reports, page 14
Available Filters, page 18
Saving and Scheduling Reports, page 8 
						

							3   
Managing Reports
Running Reports
Running Reports
This section describes how to run reports using reports view:
1.Choose Monitoring and Reports > Reports > ACS Reports.
2.Click a report from the report categories available.
3.Select one or more filters to run a report. Each report has different filters available that are case sensitive, of which some 
are mandatory and some are optional. See Table 3 on page 19 for list of available filters.
You can add or remove filters from the Filters drop-down list:
To add filters, select the required filters from the Filters drop-down list. You can find a green color tick mark appears near 
the filter name after you select it.
To remove filters, deselect the filters from the Filters drop-down list. The green color tick mark disappears after you 
deselect the filter name.
4.Click OK.
5.Enter an appropriate value for the filters.
6.Click Run.
ACS displays the generated report on the right pane.
Note: ACS displays a maximum of 250 pages per report with 100 records per page for RADIUS and TACACS+ AAA reports. For 
other reports, ACS displays a maximum of 50 pages per report with 100 records per page.
Note: When you click a link from the reports on Reports web interface, ACS opens that link in a new window. In ACS, the 
aggregation happens at 00:05 hrs every day and the cross launches from ACS reports details page display only the reports that 
are aggregated before the aggregation time. The logs that are generated after aggregation are not displayed until the next 
aggregation is complete. This limitation is applicable only for the cross launches in the reports details web interface. However,  
the Reports web interface displays all the reports irrespective of the aggregation time.
Related Topics
Exporting Reports, page 8
Saving Reports, page 9
Favorite Reports, page 13
Scheduling Reports, page 11
Reports Navigation
You can get detailed information from the reports output. For example, if you have generated a report for a period of five months, 
the graph and table will list the aggregate data for the report in a scale of months.
You can click a particular value from the table to see another report related to this particular field. For example, an authentication 
summary report will display the failed count for the user or user group. When you click the failed count, an authentication 
summary report is opened for that particular failed count.
When you run a report in the Reports Viewer, you see the first page data. To view or work with data, you use tools that help you 
navigate the report. 
						

							4
Managing Reports
 
Reports Navigation
In the Reports Viewer, you can navigate through a report by using the paging tool as displayed in Figure 1 on page 4. Using this 
tool, you can click an arrow to view the next and previous page in the report.
Figure 1 Paging Tool
The viewer also supports going to a specific page by typing a page number in Go To as displayed in Figure 2 on page 4, and 
click Go the field.
Figure 2 Going to a Specific Page
The viewer displays the total number of pages and the current page as displayed in Figure 3 on page 4, and click Go the field. 
Figure 3 Total Pages
For every reports that are displayed on the reports viewer, you can add, remove, or fix columns from the list using the column 
settings option available just above the reports header on the right-hand side as displayed in Figure 4 on page 5. 
						

							5   
Managing Reports
Reports Navigation
Figure 4 Report Settings
You change the order in which the reports header appear in the reports table. To change the reports header order, you need to 
drag the column and drop it in the place required. 
Related Topics
Show or Hide Columns in Reports Table, page 5
Fixing Columns in Reports Table, page 6
Show or Hide Columns in Reports Table
Reports Viewer provides an option to show a column from the available list or hide an existing column in the reports table using 
the column settings feature. You can click on the column settings icon to see the available list of column names. If you find a 
green color tick mark near a column name as displayed in Figure 5 on page 6, that means the column name is selected and the 
selected column names appear in the reports table. The column names that does not have a tick mark near them are not 
selected; thus it will not appear in the reports table. You can show or hide multiple columns together.
To show or hide columns in reports table. 
1.Choose Monitoring and Reports > Reports > ACS Reports > report_type.
2.Run a report, as described in Running Reports, page 3.
3.Click the arrow the settings icon. 
4.Click Columns.
5.Do one of the following:
To show a column, select the column name from the drop-down list. A green color tick mark appears near the column name 
after you select it. 
To hide a column, deselect the column name from the drop-down list. The green color tick mark disappears after you 
deselect the column name. 
6.Click Close.
Note: You can click Reset to change the configuration to its default settings.  
						

							6
Managing Reports
 
Reports Navigation
Figure 5 Show or Hide Columns
Fixing Columns in Reports Table
Reports Viewer provides an option to fix the reports header so that you cannot move that column inside the table as displayed 
in Figure 6 on page 7. To fix columns in reports table. 
1.Choose Monitoring and Reports > Reports > ACS Reports > report_type.
2.Run a report, as described in Running Reports, page 3.
3.Click the arrow the settings icon. 
4.Click Fix Columns.
5.Do one of the following:
To fix a column, select the column name from the drop-down list. A green color tick mark appears near the column name 
after you select it.
To remove a fixed column, deselect the column name from the drop-down list. The green color tick mark disappears after 
you deselect the column name.
6.Click Close.
Note: You can click Reset to change the configuration to its default settings.  
						

							7   
Managing Reports
Reports Navigation
Figure 6 Fixing Columns
Sorting Data in Reports Table
ACS 5.7 allows the user to sort data in the reports table based on the entries in the column either in ascending or descending 
order. You can click a column title once to sort the complete reports table based on the selected column entries in ascending 
order. You can find a upward-pointing arrow to the right of the column title indicating that the column entries are sorted in 
ascending order. You can click on a column title again to sort the table based on the selected column entries in descending 
order. You can find a downward-pointing arrow to the right of the column title indicating that the column entries are sorted in 
descending order. 
Filtering Data in Reports Table
ACS 5.7 allows the user to filter the data entries in reports table column-wise. ACS 5.7 uses the “contains” parameter to filter 
the data. The reports table has either a drop-down list or a text box each column heading except a few columns to which the 
filtering is not applicable. Click the drop-down list to view the available filtering options. You have to select the entry or multiple 
entries from the drop down list or enter the text in the text box to filter table entries.
To Filter reports table based on column entries: 
1.Choose Monitoring and Reports > Reports > ACS Reports > report_type.
2.Run a report, as described in Running Reports, page 3.
3.Perform one of the following actions: 
Click the drop-down arrow near the column heading to view the list of available filter values which has a check box to the 
left of each value. Check the check box near the filters. You can select multiple check boxes.
If a column has a text box, then enter the filter text in the text box.
4.Click OK.  
						

							8
Managing Reports
 
Exporting Reports
The reports table is now filtered based on the selected column entries. 
Exporting Reports
In ACS 5.7, you can export report data to an excel spreadsheet as a comma-separated values (.csv) file. Previous releases of 
ACS allowed you to export reports and copy the comma separated value file to the local file system. You need to copy the 
exported file using the copy command to a remote location. But in ACS 5.7, you have the option to configure the remote 
repository to which the exported reports are stored. After you export the data, you will receive an email detailing the location 
of the report. You can track the status of the records in the scheduler page. 
Note: To receive a email notification for the exported reports, you need to configure the email server details on the Email Settings 
page. See Specifying E Mail Settings, page 14 to configure email server details. You will not receive any email if you did not 
configure the email server details from Email Settings page. 
1.Select Monitoring and Reports > Reports > ACS Reports > report_type >, where report_type is the type of report.
The available reports for the report type you selected are displayed.
2.Run a report, as described in Running Reports, page 3.
3.Click Export.
4.Choose a repository from the drop-down list.
You cannot export the following reports:
Authentication Summary
Health Summary
All Security Group Access reports except RBACL Drop Summary report
Endpoint reports
Network Device Session Status
Note: When you export an ACS Administrator Entitlement Summary Report to a remote repository, ACS 5.6 exports the two 
columns “Administrator” and “Roles” from the reports table to a comma separated values file (csv). But, ACS 5.7 exports the 
additional column “Resources and Privileges” along with the Administrator and Roles columns. 
Note: If you configure a new repository when you are generating reports from the reports web interface, the newly configured 
repository will not be available for exporting the generated reports. You need to close the reports web interface and open it 
again to view the newly configured repository to export the generated reports.
Note: To view the non-English characters correctly after exporting a report, you must import the file into Microsoft Excel by 
enabling UTF-8 character encoding. If you choose to open the exported .csv file directly in Microsoft Excel without enabling 
UTF-8 character encoding, the non-English characters in the report appear in some garbage form.
Note: When you use Microsoft Excel to view the exported records, you should be aware of the worksheet size limitations. In 
Microsoft Excel 2007 and 2010, the maximum limit for a worksheet size is 1,048,576 rows by 16,384 columns. For more 
information, see: http://office.microsoft.com/en-us/excel-help/
excel-specifications-and-limits-HP010342495.aspx.
Saving and Scheduling Reports
In ACS 5.7, you can save or schedule reports from the new Reports web interface. The Saved and Scheduled Reports section 
of the Reports web interface has the following options: