 |
» |
|
|
|
The Local Authorization Server (LAS) generates
accounting log files when the LAS_ACCT
module is called by the Finite State Machine. Those
files have names in the format session.yyyy-mm-dd.log,
where yyyy is the year, mm the month, dd the day when the file was
generated. | | | |  | NOTE: If the logfile exceeds its size limit (as
configured in the File Size Property in the Server Properties link),
a new logfile for that day will be created and identified by a part<01-09> portion
of the logfile file name string. For example, /var/opt/aaa/acct/session.yyyy-mm-dd_part<01-09>.log | | | | |
By default, the radius.fsm (logall.fsm) state table calls the LAS_ACCT module when the server
receives an Accounting-Request to start or stop the session. Using Server
Manager to Retrieve Accounting Logfiles | |
From the navigation tree, click Accounting to
retrieve information from the AAA server accounting logfiles. Table 11-3 Accounting Logfile Search Parameters Option | Description |
|---|
Begin | The date and time of the first record in the
range of data to retrieve. | End | The date and time of the last record in the
range of data to retrieve. | User | Only searches for sessions that used
the specified ID. |
An accounting search returns a list of users. When you select
a user to retrieve information for, Server Manager parses the corresponding accounting
records and displays the information in the Accounting: Detailed
Records screen similar to the example shown in Figure 11-5 “Detailed Accounting Record for a Selected
User”.
Format
of Accounting Records in the Default Merit Style | |
RADIUS
accounting records store both the users account information and
the users historical session information. Each record begins with
a tab-delimited line of values that represent the default AAA server session
information. This information includes time-based values, as well
as HP-UX-specific and standard RADIUS A-V pairs. If a value does not
exist, N/A will appear in the values placeholder. The first line of a record appears as: Started-at Reason Log-time resrvd Connect-time Access-ID resrvd
Session Token Time-limit From Service-class Filter Service-type |
After the first line of a session record, each A-V pair in
the accounting message that triggered the logging activity is listed. | | | | | NOTE: The default session format (Merit) corresponds to the
log_v2_0 setting for the aatv parameter in the log.config file, refer to “The
log.config File ”. Alternate formats, Livingston for example, may be specified. | | | | |
- Started at:
This is the time when the
session first arrived at the RADIUS server. It is the number of
seconds since 00:00:00 GMT, Jan. 1, 1970. - Log-time:
This is the difference between
the time on the machine where and when this log was written, and
the start-time. This field is used to compress the data. - Connect time:
How long (in seconds) the
session was known to the local AAA Server host.
From represent attribute values that describe the client used
for authentication and authorization. The Access-ID, Time-limit, Service-class, and Filter values
correspond to A-V pairs (User-Name, Huntgroup-Name, Session-Timeout, Service-Class,
and Filter-Id) that exist in the user profile that corresponds to
the session record. Writing
Livingston CDR Accounting Records | |
It
is not possible to make these changes through the Server Manager graphic
interface, you must modify configuration files with a text editor. Open the log.config configuration file (found in /etc/opt/aaa by default). Locate the following lines,
which should be found at the beginning of the file: # Default logging configuration if there is no log.config file.
#
stream *default* {
aatv log_v2_0
buffer 1
close on
filename session.%Y-%m-%d.log
update 900
wrap 3
}
end |
Change aatv log_v2_0 to aatv log_acct. Save and close the file. Restart the server if it is currently
running.
Changing
the Accounting Log Filename | |
Open the log.config configuration file (found in /etc/opt/aaa by default). Locate the following lines,
which should be found at the beginning of the file: # Default logging configuration if there is no log.config file.
#
stream *default* {
aatv log_v2_0
buffer 1
close on
filename session.%Y-%m-%d.log
update 900
wrap 3
}
end |
Change session.%Y-%m-%d.log to the filename syntax you wish to use. Save and close the file. Restart the server if it is currently
running.
Changing
the Accounting Log Rollover Interval | |
The log rollover interval (how often a new log file is created
to store accounting records) is determined by the timestamp portion
of the filename. To change the interval follow the steps in the
To Change the Accounting Log Filename procedure. The logging interval
will change to the finest unit of time in the timestamp portion
of the filename. For example,%Y-%m-%d-%H, will change the rollover interval to hourly. |
Printable version
