aaa

Application name

aaa

Event name

serverDown

Default severity

error

Message format string

Server server_address in group server_group is down

Cause

The specified server is down, either via being unreachable, or a timeout

Effect

The specified server can no longer be used for authentication, authorization, or accounting transactions.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

serverGroupDown

Default severity

error

Message format string

All servers in server group server_group are down

Cause

All servers within the specified server group are no longer available

Effect

The specified server group can no longer be used for authentication, authorization, or accounting transactions.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

serverGroupUp

Default severity

error

Message format string

Servers in server group server_group are up

Cause

Servers within the specified server group are available

Effect

The specified server group can be used for authentication, authorization, or accounting transactions.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

serverRouteUnavailable

Default severity

error

Message format string

No route available to reach remote server server_address in server group server_group via network instance network_instance

Cause

No routes are available in the specified network instance to reach the remote server

Effect

The specified server can no longer be used for authentication, authorization, or accounting transactions.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

serverTimeout

Default severity

error

Message format string

Server server_address in group server_group has timed out

Cause

The connection between the AAA manager and the remote server has timed out. The server will be tried again in 30 seconds, or immediately if a valid response is received

Effect

The specified server can no longer be used for authentication, authorization, or accounting transactions.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

serverUp

Default severity

error

Message format string

Server server_address in group server_group is up

Cause

The specified server is up

Effect

The specified server can be used for authentication, authorization, or accounting transactions.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

sessionClosed

Default severity

notice

Message format string

Closed session session_id for user user_name from host remote_host in network-instance network_instance

Cause

The specified user has closed a session on the system

Effect

None.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

sessionDisconnected

Default severity

notice

Message format string

Session session_id for user user_name from remote host remote_host in network-instance network_instance disconnected by administrative action

Cause

A specific session for a user has been disconnected from the system by an administrator

Effect

The specified user is disconnected.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

sessionIdleDisconnected

Default severity

notice

Message format string

Session session_id for user user_name from remote host remote_host in network-instance network_instance disconnected by timeout

Cause

The specified user session disconnected from the system due to an idle timeout

Effect

The specified user is disconnected.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

sessionOpened

Default severity

notice

Message format string

Opened session session_id for user user_name from host remote_host in network-instance network_instance

Cause

The specified user has opened a session on the system

Effect

None.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

systemDateAndTimeChangedByUser

Default severity

informational

Message format string

User user_name from origin changed system date and time from previous_date_and_time to new_date_and_time

Cause

A user changed the system clock using the date or timedatectl command.

Effect

An audit record of the system date and time change is generated for compliance.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

tacacsRoleInvalid

Default severity

error

Message format string

Invalid vsa_name vsa_value received from the TACACS+ server for user user_name

Cause

The TACACS+ server provided an invalid role parameter.

Effect

The TACACS+ user is disconnected.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

tlsCryptoElementChanged

Default severity

informational

Message format string

User username performed operation on TLS/cryptographic element element_path

Cause

A TLS or cryptographic configuration element was created, updated, or deleted.

Effect

Audit record generated for compliance (NIAP / FID9499.4).

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

userAuthenticationFailed

Default severity

warning

Message format string

User user_name authentication failed from host remote_host in network-instance network_instance

Cause

The specified user has failed authentication

Effect

None.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

userAuthenticationSucceeded

Default severity

notice

Message format string

User user_name on session session_id successfully authenticated from host remote_host in network-instance network_instance

Cause

The specified user has successfully authenticated

Effect

None.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

userAuthenticationTimedOut

Default severity

warning

Message format string

User user_name authentication timed out from host remote_host in network-instance network_instance

Cause

The specified user authentication timed out

Effect

None.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

userLockoutReset

Default severity

warning

Message format string

User user_name is unlocked

Cause

Tools command is used to unlock this user or when the lockout timer expires

Effect

None.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

userLockoutSet

Default severity

warning

Message format string

User user_name is locked out

Cause

The specified user has been locked out after successive authentication failed attempts within a specific time duration

Effect

None.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

userPasswordChanged

Default severity

notice

Message format string

Password for user user_name has changed

Cause

The user has changed his password or it was changed by a user with administrative rights

Effect

None.

Raising event

N/A

Clearing event

N/A

Application name

aaa

Event name

userPasswordExpired

Default severity

warning

Message format string

User user_name password has expired

Cause

The specified user has not changed his password before aging time

Effect

None.

Raising event

N/A

Clearing event

N/A