No username displayed in Real Time Change Email - 2023

matt_rees

Hey,

I noticed that it doesn't display an actual valid username on the email alert of our real time change notification. I have found some old posts where they ticked the box below, but this has not worked for us:

Even though ours is already ticked, I still only get this below at the top of the email:

Is anyone familiar with this, or know how I can remedy it? Thanks.

maciej.sandecki

Cisco ASA does not send username in the message used by RTCD (%ASA-5-111005) to detect configuration change. However Cisco switches / routers do (message %SYS-5-CONFIG_I) and I can see the usernames in syslog messages coming from them.

On ASA there are some other messages that include username, these are syslog IDs 111008, 111009 and 111010. Not sure though if it is a good idea to trigger RTCD on every such message, as you could trigger RTCD multiple times in a short time. Still, these messages may be recorded by your Syslog and viewed there.