TACACS log audit by solarwinds

Question

Hi All,

Please share the best way to audit the logs of TACACS by solarwinds.

which module will be best to capture and audit purpose.

thanks

krishnamishra0786 · Answer

Thank you RaviK, let me check the all steps and process.

RaviK · Answer

Hi Krishna,

I think the best way to audit the logs of a TACACS server would be the use of Security Event Manager (SEM).

Success Center - Integrate Cisco ACS Syslog reports with SolarWinds SEM

You should be able to get quite a few audit reports

Passed Authentication

RADIUS Accounting

TACACS+ Accounting

TACACS+ Administration

VoIP Accounting

Note SEM has a ready parser for Cisco ACS (if that is the TACACS server you are using.

Cheers