简介
本文档介绍用于检查Cisco Unified Intelligence Center(CUIC)服务器中当前登录用户数量的流程。
背景信息
运行CUIC服务器时,需要确保当前登录到集群中任何报告节点的用户数不超过限制。对于Unified Intelligence Server版本11.0,限制为每节点200个用户。如果有更多用户登录到特定节点,则可能会导致性能问题。
问题示例
具有登录名ccmadmin的用户使用CUIC报告选项卡关闭了浏览器,但未正确注销。您在输出中看到两个(重复)会话。此外,还显示了不正确数量的当前登录报告用户。
admin:utils cuic session list
Command executed successfully
Session ID details saved to file.
To view file, type "file view activelog cuic-session.out"
To SFTP file, type "file get activelog cuic-session.out"
admin:file view activelog cuic-session.out
User: CUIC\ccmadmin - Last Session Time: 13/Feb/2017 13:47:09 - SessionID: E819B0F5114A4A62778CB08C01BAB0F1
User: CUIC\ccmadmin - Last Session Time: 13/Feb/2017 15:04:38 - SessionID: E6AC6567352C245C8061E693BE1DC760
User: ADMINISTRATOR\cuicu1 - Last Session Time: 13/Feb/2017 15:21:17 - SessionID: 4EC191A25D946E5C7BF75AE2E79E0B72
end of the file reached
options: q=quit, n=next, p=prev, b=begin, e=end (lines 1 - 3 of 3) :
admin:show perf query counter ReportingEngineInfo ReportsUsersLoggedin
- Perf class ReportingEngineInfo(ReportsUsersLoggedin) has values:
-> ReportsUsersLoggedin = 3
验证
为了检查用户数量,可以使用以下CUIC命令行界面(CLI)命令:
admin:show perf query counter ReportingEngineInfo ReportsUsersLoggedin
- Perf class ReportingEngineInfo(ReportsUsersLoggedin) has values:
-> ReportsUsersLoggedin = 2
另一种方法是检入实时监控工具(RTMT)应用程序。导航到System -> Performance。选择要监控的节点。然后展开ReportingEngineInfo,并双击ReportsUsersLoggedIn。
故障排除
本部分提供了可用于对配置进行故障排除的信息。
在某些情况下,此值可能反映不准确的用户登录数。
此问题的一个常见根本原因是用户报告关闭其浏览器,而不是点击右上角的Log Out按钮。
要获取特定节点上已登录用户的列表,请使用此命令。
admin:utils cuic session list
Command executed successfully
Session ID details saved to file.
To view file, type "file view activelog cuic-session.out"
To SFTP file, type "file get activelog cuic-session.out"
admin:file view activelog cuic-session.out
User: CUIC\ccmadmin - Last Session Time: 13/Feb/2017 15:04:38 - SessionID: E6AC6567352C245C8061E693BE1DC760
User: ADMINISTRATOR\cuicu1 - Last Session Time: 13/Feb/2017 15:21:17 - SessionID:3860176B2BAD8D8BEB10D4643FBD011F
end of the file reached
options: q=quit, n=next, p=prev, b=begin, e=end (lines 1 - 3 of 3) :
您可以在此处找到具有UserLoginAttempt(用户按下的登录按钮)、UserLoginSuccess和SessionEnd(用户按下的注销按钮)操作的CUIC报告日志参考。
admin:file tail activelog cuic/logs/cuic/ recent regexp "User login or logout"
0000001591: 10.48.47.142: Feb 13 2017 15:01:35.520 +0100: %CCBU__CUIC_SECURITY-7-OPERATION: %[MESSAGE=Total number of login attempts for the server=50][OPERATION_TYPE=UserLoginAttempt][SESSION_ID=3860176B2BAD8D8BEB10D4643FBD011F][USER_ID=]: User login or logout request to server.
0000001636: 10.48.47.142: Feb 13 2017 15:01:35.576 +0100: %CCBU__CUIC_SECURITY-7-OPERATION: %[MESSAGE=Total number of logged-in user instance for the server=3][OPERATION_TYPE=UserLoginSuccess][SESSION_ID=3860176B2BAD8D8BEB10D4643FBD011F][USER_ID=ADMINISTRATOR\cuicu1]: User login or logout request to server.
0000001683: 10.48.47.142: Feb 13 2017 15:22:01.559 +0100: %CCBU__CUIC_SECURITY-7-OPERATION: %[MESSAGE=Total number of logged-in user instance for the server=2][OPERATION_TYPE=SessionEnd][SESSION_ID=3860176B2BAD8D8BEB10D4643FBD011F][USER_ID=ADMINISTRATOR\cuicu1]: User login or logout request to server.
如果在日志文件中未看到SessionEnd事件,则表明没有收到来自客户端的注销请求。
解决方案
教育报告用户在CUIC中单击Log Out按钮,然后关闭互联网浏览器。
相关文章