How to Verify Configuration Changes from NetScaler Logs

How to Verify Configuration Changes from NetScaler Logs

book

Article ID: CTX204790

calendar_today

Updated On:

Description

How to Verify the Logs for Configuration Changes done on NetScaler


Instructions

From Newnslogs(located under /var/nslog):

Run below command to look for any command changes being done:

nsconmsg -K newnslog -d auditedcmd 

e.g output:

Command 'NSAPI_DELETE_SERVICE_GROUP' executed on PPE-0 on Thu Dec 10 13:55:05 2015
 
Command 'NSAPI_DELETE_SERVICE_GROUP' executed on PPE-1 on Thu Dec 10 13:55:05 2015
 
Command 'NSAPI_DELETE_SERVICE_GROUP' executed on PPE-0 on Thu Dec 10 13:55:10 2015
 
Command 'NSAPI_DELETE_SERVICE_GROUP' executed on PPE-1 on Thu Dec 10 13:55:10 2015

We can verify the changes from /var/log/ns.log file with user-name.

However ns.log files are limited to a specific time in past.

For eg:

In the below screenshot we can find that a certificate by the name of test123456 was installed by username: nsroot

User-added image


 

Issue/Introduction

How to Verifiy Configuration Changes from Netscaler logs