System Setup and Software Installation Guide for Cisco NCS 1014, IOS XR Releases 26.x.x

PDF

System Setup and Software Installation Guide for Cisco NCS 1014, IOS XR Releases 26.x.x

Implementing audit monitoring

Describes how audit logging and monitoring on Cisco NCS 1014 helps administrators track security events, review feature support, apply operational guidelines, understand log storage, and configure audit log forwarding.


This chapter explains the audit monitoring and logging capabilities available on NCS 1014 and how to configure audit monitoring.

Feature name

Release information

Description

Audit logging and monitoring

Cisco IOS XR 25.3.1

You can enable audit logging and monitoring on the NCS 1014. You can also configure predefined rule groups that allow NCS 1014 to monitor activities, log events, and, when necessary, forward audit logs to a remote syslog server for centralized analysis and incident response. This feature helps enhance security and compliance on your network.

CLI:

These new commands are introduced:

  • linux security audit monitor group-keyword

  • show linux security audit monitor status

  • linux security audit logging syslog

  • logging remote-server-ipvrfremote-server-ip

  • show linux security audit logging syslog