Provides instructions for configuring audit monitoring and logging on the NCS 1004 to track system events and security-relevant changes. By implementing these features, administrators can enhance network compliance and security through centralized analysis of audit logs forwarded to a remote syslog server.
This chapter explains the audit monitoring and logging capabilities available on NCS 1004 and how to configure audit monitoring.
| Feature name |
Release information |
Description |
|---|---|---|
| Audit logging and monitoring |
Cisco IOS XR 25.3.1 |
You can enable audit logging and monitoring on the NCS 1004. You can also configure predefined rule groups that allow NCS 1004 to monitor activities, log events, and, when necessary, forward audit logs to a remote syslog server for centralized analysis and incident response. This feature helps enhance security and compliance on your network. CLI: These new commands are introduced:
|
Audit logging
This topic explains how audit logs and audit rules work together to automatically record security-relevant events, facilitate compliance monitoring, and enable administrators to track system changes for investigation and reporting purposes.