Console Login to be traced
Hello,
We have a requirement from our SOC team that we must trace the user login from console port if anyone does it.
For this I made packet-trace on wancom0 port and saw that the log is generated for failed and successfull login.
AUTH.ERR Oct 4 12:27:09 SBC1 tConsole[cfc] ERROR loginLocal: [0:3324] user: admin failed to login to console
The SOC team informs that they did not receive log as above. Does anyone have any idea how to send the tConsole logs over syslog ?
Fyi, we already have audit-logging enabled.
Thank you in advance for your feedback,
Best regards