300-620 · Question #385
An engineer wants to record the login and configuration change events in a Cisco ACI environment. The requirements are to send the records to a syslog server, but to exclude fabric- related or…
The correct answer is B. Configure the forwarding facility of the remote destination in the external data collectors to Iocal7. Setting the syslog remote destination's forwarding facility to local7 ensures that only audit logs (such as login and configuration changes) are sent to the syslog server while excluding fabric- related and tenant-related events, which use different facilities.
Question
An engineer wants to record the login and configuration change events in a Cisco ACI environment. The requirements are to send the records to a syslog server, but to exclude fabric- related or tenant-related events. Which action accomplishes this goal?
Options
- AConfigure the default monitoring policy in the access policies to include the audit logs.
- BConfigure the forwarding facility of the remote destination in the external data collectors to Iocal7.
- CConfigure the syslog source Min Severity to the information level in the access policy.
- DConfigure the local file destination severity to debugging level in the external data collectors.
How the community answered
(64 responses)- A5% (3)
- B72% (46)
- C16% (10)
- D8% (5)
Explanation
Setting the syslog remote destination's forwarding facility to local7 ensures that only audit logs (such as login and configuration changes) are sent to the syslog server while excluding fabric- related and tenant-related events, which use different facilities.
Topics
Community Discussion
No community discussion yet for this question.