1

I'm trying to get a list of the users that have logged into a Cisco ACS, and the date of their last login. Ideally, I'd like it to include the identity store that was the source of the authentication info for the login (AD, RADIUS, etc.) I've looked in the ACS GUI, including monitoring and reports, but I mainly find things referencing monitoring the device's status itself, or broad trends. The one section that lists user information does it for one user at a time (not practical for a large pool of users). I've looked online but so far all I can find is someone telling how to do it in version 4, nothing for 5.2. Cisco's own documents don't seem to mention it either. As a side note, upgrading the software version is not an option at this time.

Improve this question

2 Answers 2

Reset to default
3

According to the Cisco TAC representative who handled my case, there is no way to get a list of users that includes their last login date, with the possible exception of looking up each user individually. I'm not sure I believe this answer, as it seems like such a basic query that I'd be very surprised if they didn't include any way to get the answer, but that is the word from Cisco themselves.

I am going to persist in trying to find a way to get that list, and if I succeed, I will update this answer.

Improve this answer
-2

Just look in the Administrator Guide for "accounting" which is one of the A's in AAA.

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4-2/user/guide/ACS4_2UG/LgsRpts.html

enter image description here

Improve this answer
10
  • That is for version 4.2 It does not work for version 5.2, which is the one I need assistance with, as specified in the question. But thank you for your time.
    – user3573647
    May 31, 2016 at 22:49
  • See Monitoring & Report Viewer System Operations
    – Ronnie Royston
    May 31, 2016 at 23:20
  • Also Available Reports in the Catalog
    – Ronnie Royston
    May 31, 2016 at 23:25
  • Neither of those tell how to get a list of users with their last login dates, unless I missed it, but I've looked them over several times. The Available Reports table doesn't specifically mention being able to do this, so I'm wondering if it's even possible. But it seems like a very basic query to run; if Cisco left no way to do it I'll be pretty surprised. Thanks again for your suggestions.
    – user3573647
    Jun 1, 2016 at 0:40
  • Authentication Records and Details
    – Ronnie Royston
    Jun 1, 2016 at 4:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.