User Guide for the Cisco Secure Access Control System 5.0
Monitoring & Report Viewer System Operations
Downloads: This chapterpdf (PDF - 156.0KB) The complete bookPDF (PDF - 12.93MB) | Feedback

Monitoring & Report Viewer System Operations

Table Of Contents

Monitoring & Report Viewer System Operations

Configuring Data Purging

Viewing Log Collections

Log Collection Details Page

Viewing Scheduled Jobs

Viewing Process Status

Viewing Failure Reasons

Editing Failure Reasons

Specifying Email Settings

Specifying Session Settings

Specifying System Alarm Settings


Monitoring & Report Viewer System Operations


You access the System Operations pages by launching the Monitoring & Report Viewer, and then opening the Monitoring Configuration drawer and selecting System Operations.

The System Operations option contains options that allow the following:

Configuring Data Purging

Viewing Log Collections

Viewing Scheduled Jobs

Viewing Process Status

Viewing Failure Reasons

Specifying Email Settings

Specifying Session Settings

Specifying System Alarm Settings

Configuring Data Purging

Use this page to configure a specific amount of data to purge from a data repository, and assign a data repository backup location, to manage available disk space. Data is purged daily at 4:00a.m. of the local time zone where the data repository resides.

Note the following database limitations for purging:

If the database size (not the file size, but the actual database size) is 95% of 80 GB, which is 76 GB, an alarm is sent to the dashboard.

If the database size is over 80 GB, a purge occurs. After the initial purge, if the database size remains over 80 GB, one additional month of data is purged. For example, if you specify to preserve 5 months of data, but the database size is over 80 GB, a purge occurs. If the database size remains over 80 GB after the purge, an additional month of data is purged which results in 4 months of data preserved. Before the purge, the database is backed up. If the database backup fails for any reason, the purge does not start.

If the database size is over 100 GB, a purge occurs regardless of whether a database backup has occurred. If the database size remains over 80 GB, an additional purge occurs until the database is 80 GB or less.


Note Every ACS administrator account is assigned one or more administrative roles. Depending upon the roles assigned to your account, you may or may not be able to perform the operations or see the options described in the following procedure. See Configuring System Administrators and Accounts, page 14-2 to configure the appropriate administrator privileges.


From the Monitoring & Report Viewer, select Monitoring Configuration > System Operations > Data Purging.

Table 13-1 Data Purging Page 

Option
Description

Data Repository

Use the drop-down list box to select the data repository backup location to be used during data purging.

Note See the CLI Reference for ACS 5.0 to add a data repository.

Purge Every <num> months

Use the drop-down list box to indicate the number of months, where <num> is the number of months of data you want to retained in the ACS database.

If you have a Base license, you cannot configure the number of months; it is preset to 2.

Purge History

Start Time

Display only. Indicates the start times of the five most recent data purge events, in the format Ddd Mmm dd hh:mm:ss timezone yyyy, where:

Ddd = Sun, Mon, Tue, Wed, Thu, Fri, Sat.

Mmm = Jan, Feb, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec.

dd = A two-digit numeric representation of the day of the month, from 01 to 31.

hh = A two-digit numeric representation of the hour of the day, from 00 to 23.

mm = A two-digit numeric representation of the minute of the hour, from 00 to 59.

ss = A two-digit numeric representation of the second of the minute, from 00 to 59.

timezone = The time zone. In a distributed environment, the timezone displayed for all secondary servers corresponds to the timezone of the server in which the view is active. If your primary instance has a timezone of PDT and the secondary instance is in UTC, the secondary instance displays the timezone and timestamp of syslog messages with PDT, which corresponds to the timezone of the primary instance.

yyyy = A four-digit representation of the year.

End Time

Display only. Indicates the end times of the five most recent data purge events, in the format Ddd Mmm dd hh:mm:ss timezone yyyy, where:

Ddd = Sun, Mon, Tue, Wed, Thu, Fri, Sat.

Mmm = Jan, Feb, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec.

dd = A two-digit numeric representation of the day of the month, from 01 to 31.

hh = A two-digit numeric representation of the hour of the day, from 00 to 23.

mm = A two-digit numeric representation of the minute of the hour, from 00 to 59.

ss = A two-digit numeric representation of the second of the minute, from 00 to 59.

timezone = The time zone. In a distributed environment, the timezone displayed for all secondary servers corresponds to the timezone of the server in which the view is active. If your primary instance has a timezone of PDT and the secondary instance is in UTC, the secondary instance displays the timezone and timestamp of syslog messages with PDT, which corresponds to the timezone of the primary instance.

yyyy = A four-digit representation of the year.

Status

Display only. Indicates the status of all data purges.


Viewing Log Collections

Use this page to view recently collected log names for ACS servers.

From the Monitoring & Report Viewer, select Monitoring Configuration > System Operations > Log Collection.


Note You can use the refresh symbol to refresh the contents of the page.


Table 13-2 Log Collection Page 

Option
Description

ACS Server

The name of the ACS server. Click to open the Log Collection Details page and view recently collected logs.

Last Syslog Message

Display only. Indicates the arrival time of the most recent syslog message, in the format Ddd Mmm dd hh:mm:ss timezone yyyy, where:

Ddd = Sun, Mon, Tue, Wed, Thu, Fri, Sat.

Mmm = Jan, Feb, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec.

dd = A two-digit numeric representation of the day of the month, from 01 to 31.

hh = A two-digit numeric representation of the hour of the day, from 00 to 23.

mm = A two-digit numeric representation of the minute of the hour, from 00 to 59.

ss = A two-digit numeric representation of the second of the minute, from 00 to 59.

timezone = The time zone. In a distributed environment, the timezone displayed for all secondary servers corresponds to the timezone of the server in which the view is active. If your primary instance has a timezone of PDT and the secondary instance is in UTC, the secondary instance displays the timezone and timestamp of syslog messages with PDT, which corresponds to the timezone of the primary instance.

yyyy = A four-digit representation of the year.

Last Error

Display only. Indicates the name of the most recent error message.

Last Error Time

Display only. Indicates the arrival time of the most recent error message, in the format Ddd Mmm dd hh:mm:ss timezone yyyy, where:

Ddd = Sun, Mon, Tue, Wed, Thu, Fri, Sat.

Mmm = Jan, Feb, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec.

dd = A two-digit numeric representation of the day of the month, from 01 to 31.

hh = A two-digit numeric representation of the hour of the day, from 00 to 23.

mm = A two-digit numeric representation of the minute of the hour, from 00 to 59.

ss = A two-digit numeric representation of the second of the minute, from 00 to 59.

timezone = The time zone.In a distributed environment, the timezone displayed for all secondary servers corresponds to the timezone of the server in which the view is active. If your primary instance has a timezone of PDT and the secondary instance is in UTC, the secondary instance displays the timezone and timestamp of syslog messages with PDT, which corresponds to the timezone of the primary instance.

yyyy = A four-digit representation of the year.

Get Details

Click to view recently collected logs for a selected ACS server.


Log Collection Details Page

Use this page to view the recently collected log names for an ACS server.


Step 1 From the Monitoring & Report Viewer, select Monitoring & Reports > Monitoring Configuration > Log Collection.

Step 2 Do one of the following:

Click the name of an ACS server.

Select the radio button of an ACS server name which you want to view recently collected logs, and click Get Details.


Note You can use the refresh symbol to refresh the contents of the page.


Table 13-3 Log Collection Details Page 

Option
Description

Log Name

Name of the log file.

Last Syslog Message

Display only. Indicates the arrival time of the most recent syslog message, in the format Ddd Mmm dd hh:mm:ss timezone yyyy, where:

Ddd = Sun, Mon, Tue, Wed, Thu, Fri, Sat.

Mmm = Jan, Feb, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec.

dd = A two-digit numeric representation of the day of the month, from 01 to 31.

hh = A two-digit numeric representation of the hour of the day, from 00 to 23.

mm = A two-digit numeric representation of the minute of the hour, from 00 to 59.

ss = A two-digit numeric representation of the second of the minute, from 00 to 59.

timezone = The time zone. In a distributed environment, the timezone displayed for all secondary servers corresponds to the timezone of the server in which the view is active. If your primary instance has a timezone of PDT and the secondary instance is in UTC, the secondary instance displays the timezone and timestamp of syslog messages with PDT, which corresponds to the timezone of the primary instance.

yyyy = A four-digit representation of the year.

Last Error

Display only. Indicates the name of the most recent error message.

Last Error Time

Display only. Indicates the arrival time of the most recent error message, in the format Ddd Mmm dd hh:mm:ss timezone yyyy, where:

Ddd = Sun, Mon, Tue, Wed, Thu, Fri, Sat.

Mmm = Jan, Feb, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec.

dd = A two-digit numeric representation of the day of the month, from 01 to 31.

hh = A two-digit numeric representation of the hour of the day, from 00 to 23.

mm = A two-digit numeric representation of the minute of the hour, from 00 to 59.

ss = A two-digit numeric representation of the second of the minute, from 00 to 59.

timezone = The time zone. In a distributed environment, the timezone displayed for all secondary servers corresponds to the timezone of the server in which the view is active. If your primary instance has a timezone of PDT and the secondary instance is in UTC, the secondary instance displays the timezone and timestamp of syslog messages with PDT, which corresponds to the timezone of the primary instance.

yyyy = A four-digit representation of the year.

Back

Click to return to the Log Collection page.



Related Topic

Viewing Log Collections

Viewing Scheduled Jobs

Use this page to view scheduled jobs.

From the Monitoring & Report Viewer, select Monitoring Configuration > System Operations > Scheduler.

Table 13-4 Scheduler Status Page 

Option
Description

Name

Display only. The name of the job.

Type

Display only. The type of associated job.

Owner

Display only. The owner of the associated job—System.

Last Run Time

Display only. The time of the associated job, in the format Ddd Mmm dd hh:mm:ss timezone yyyy, where:

Ddd = Sun, Mon, Tue, Wed, Thu, Fri, Sat.

Mmm = Jan, Feb, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec.

dd = A two-digit numeric representation of the day of the month, from 01 to 31.

hh = A two-digit numeric representation of the hour of the day, from 00 to 23.

mm = A two-digit numeric representation of the minute of the hour, from 00 to 59.

ss = A two-digit numeric representation of the second of the minute, from 00 to 59.

timezone = The time zone.

yyyy = A four-digit representation of the year.

Last Run Result

Display only. The result of the last run of the associated job.

Status

Display only. The status of the associated job.


Viewing Process Status

Use this page to view the status of processes running in your ACS environment.

From the Monitoring & Report Viewer, select Monitoring Configuration > System Operations > Process Status.


Note You can click the refresh symbol to refresh the contents of the page.


Table 13-5 Process Status Page 

Option
Description

Process Name

Display only. The name of the process. Options can be:

database

management (ACS management subsystem)

runtime (ACS runtime subsystem)

view-alertmanager

view-collector

view-database

view-jobmanager

Status

Display only. Indicates the status of the associated process.

CPU Utilization

Display only. Indicates the CPU utilization of the associated process.

Memory Utilization

Display only. Indicates the memory utilization of the associated process.

Uptime

Display only. Indicates the time that the process was started successfully, in the format Ddd Mmm dd hh:mm:ss timezone yyyy, where:

Ddd = Sun, Mon, Tue, Wed, Thu, Fri, Sat.

Mmm = Jan, Feb, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec.

dd = A two-digit numeric representation of the day of the month, from 01 to 31.

hh = A two-digit numeric representation of the hour of the day, from 00 to 23.

mm = A two-digit numeric representation of the minute of the hour, from 00 to 59.

ss = A two-digit numeric representation of the second of the minute, from 00 to 59.

timezone = The time zone.

yyyy = A four-digit representation of the year.


Viewing Failure Reasons

Use this page to view failure reasons.

From the Monitoring & Report Viewer, select Monitoring Configuration > System Configuration > Failure Reasons Editor.

Table 13-6 Failure Reasons Page 

Option
Description

Failure Reasons

The name of possible failure reasons. Click a failure reason name to open the Failure Reasons Editor page.


Related Topic

Editing Failure Reasons

Editing Failure Reasons

Use this page to edit failure reasons and include possible resolution steps to assist administrators when they encounter failures.


Note Every ACS administrator account is assigned one or more administrative roles. Depending upon the roles assigned to your account, you may or may not be able to perform the operations or see the options described in the following procedure. See Configuring System Administrators and Accounts, page 14-2 to configure the appropriate administrator privileges.



Step 1 From the Monitoring & Report Viewer, select Monitoring Configuration > System Configuration > Failure Reasons Editor.

Step 2 Click:

The name of the failure reason you want to edit.

The radio button associated with the failure reason you want to edit, then click Edit.

The Failure Reason Editor Page appears as described in Table 13-7.

Table 13-7 Failure Reasons Editor Page 

Option
Description

Failure Reason

Display only. The error code and associated failure reason name.

Description

Enter a free text description of the failure reason to assist administrators; use the text tools as needed.

Resolution Steps

Enter a free text description of possible resolution steps for the failure reason to assist administrators; use the text tools as needed.



Specifying Email Settings

Use this page to specify the email server and administrator email address.


Note Every ACS administrator account is assigned one or more administrative roles. Depending upon the roles assigned to your account, you may or may not be able to perform the operations or see the options described in the following procedure. See Configuring System Administrators and Accounts, page 14-2 to configure the appropriate administrator privileges.


From the Monitoring & Report Viewer, select Monitoring Configuration > System Configuration > Email Settings.

Table 13-8 Email Settings Page 

Option
Description

Mail Server

Enter a valid email host server.

Mail From

Enter the email address name that you want to configure for users to see when they receive email from the system.


Specifying Session Settings

Use this page to specify the session timeout values for any sessions that are not terminated, after which a user must log back in.


Note Every ACS administrator account is assigned one or more administrative roles. Depending upon the roles assigned to your account, you may or may not be able to perform the operations or see the options described in the following procedure. See Configuring System Administrators and Accounts, page 14-2 to configure the appropriate administrator privileges.


From the Monitoring & Report Viewer, select Monitoring Configuration > System Configuration > Session Directory Settings.

Table 13-9 Session Directory Settings Page 

Option
Description

Session Timeout

Use the drop-down list box to select from 1 to 5 days for an administrative session time to occur. For example, if you select 1 from the Session Timeout list, the session is terminated at midnight that day. If the session starts on a given day at 23:00:01, the session is terminated when the time reaches the next day at 00:00:00.

After the configured time is met, a user must log back in.


Specifying System Alarm Settings

Use this page to identify user lists for users that you want notified of system alarm events, and whether to suppress duplicate email notifications of alarm events.

From the Monitoring & Report Viewer, select Monitoring Configuration > System Configuration > System Alarm Settings.

Table 13-10 System Alarm Settings Page 

Option
Description

Email Notification User List

Enter valid email addresses, or click Select to enter valid email addresses, for those individuals you want notified of system alarm events.

Clear

Click to delete content from the Email Notification User List.

Notify System Alarms

Check the check box to enable the defined email addresses listed in the Email Notification User List of system alarm events.

System Alarms Suppress Duplicates <hour>

Use the drop-down list box to designate the number of hours that you want to suppress duplicate system alarms from being sent to the Email Notification User List. Valid options are 1, 2, 4, 6, 8, 12, and 24.