Go Up
You are here: AdministrationMonitored Object Types, Actions, and AttributesCisco Devices

Object Types and Attributes Monitored with Syslog Message Processing Service

Review a full list of object types Netwrix Auditor can collect on Cisco network devices.

NOTE: Details marked with * are specific for their object types and may vary depending on access type, connection details, etc. For example, for the "Authentication" object type, the "Interface" attribute will be reported if a user tries to access Cisco device via SSH protocol.

Object type Actions Details
Cisco ASA devices
Authentication
  • Successful logon / Failed logon
  • Facility
  • Interface*
  • Kerberos Server*
  • Message ID
  • Raw Message
  • Severity
  • Source
Configuration
  • Add / Added (Failed attempt)
  • Modified / Modify (Failed attempt)
  • Read / Read (Failed attempt)
  • Removed / Remove (Failed attempt)
  • Facility
  • Message ID
  • Raw Message
  • Severity
  • Source
CPU
  • Modified / Modify (Failed attempt)
  • Facility
  • Message ID
  • Raw Message
  • Severity
  • Source
Environment (IPMI)
  • Modified / Modify (Failed attempt)
  • Facility
  • Message ID
  • Raw Message
  • Severity
  • Source
GroupPolicy
  • Add / Added (Failed attempt)
  • Facility
  • Message ID
  • Policy Type
  • Raw Message
  • Severity
  • Source
Logon
  • Successful logon / Failed logon
  • Facility
  • Message ID
  • Raw Message
  • Severity
  • Source
RAM
  • Modified / Modify (Failed attempt)
  • Actual
  • Facility
  • Message ID
  • Raw Message
  • Required
  • Severity
  • Source
RIP authentication
  • Successful logon / Failed logon
  • Facility
  • Interface*
  • Message ID
  • Raw Message
  • Severity
  • Source
Session
  • Session start / Session end
  • Facility
  • Message ID
  • Private IP*
  • Raw Message
  • Severity
  • Source
URL
  • Read / Read (Failed attempt)
  • Facility
  • Message ID
  • Raw Message
  • Severity
  • Source
User
  • Modified / Modify (Failed attempt)
  • Facility
  • Message ID
  • Raw Message
  • Privilege level
  • Severity
  • Source
  • User Status*
Cisco IOS

Logon

  • Successful logon
  • Failed logon
  • Facility
  • Local Port
  • Raw Message
  • Reason
  • Severity
  • Source

Configuration

  • Read
  • Facility
  • Raw Message
  • Severity
  • Source
  • Modified
  • Facility
  • Interface
  • Raw Message
  • State
  • Severity
  • Source

Environment

  • Modified
  • Facility
  • Raw Message
  • Severity
  • Source

Go Up