Re: How to display user name instead of N/A in configuration change report (1094 Views)
Reply
Occasional Advisor
tagrawal
Posts: 22
Registered: ‎05-30-2012
Message 1 of 19 (1,119 Views)
Accepted Solution

How to display user name instead of N/A in configuration change report

[ Edited ]

Hi, 

 

I am using NA 9.10.

In configuration change i am getting N/A.

What should i configure so that it show actual user name who did changes.snapshot

 

 

HP Expert
_paul
Posts: 242
Registered: ‎05-24-2012
Message 2 of 19 (1,094 Views)

Re: How to display user name instead of N/A in configuration change report

Hello,

 

There are some things to check:

 

1) Are the Syslog Patterns added to NA Admin - Administrative Settings - Configuration Mgmt - Change Detection - Syslog Detection Patterns?

2) Are the Syslog Messages received by NA Server? 

 

If these two are fine, then we need to see more via a support case.

 

Thanks and regards,

Paul

Super Advisor
MohanSekar
Posts: 303
Registered: ‎03-01-2012
Message 3 of 19 (976 Views)

Re: How to display user name instead of N/A in configuration change report

Hello Paul,

 

Even I face the similar issue.

 

For some devices I do see the user name who made the change? But for most of the  devices I don't see it.

 

Could you please let me know how to check if the syslog messages are received by the NA server?

 

Regards

 

Mohan Sekar

HP Expert
_paul
Posts: 242
Registered: ‎05-24-2012
Message 4 of 19 (974 Views)

Re: How to display user name instead of N/A in configuration change report

Hi Mohan,

 

In order to see the Syslog Messages received by the NA server, you can set on trace  the following logs: 

Device/Syslog, External/Syslog, Feature/Changedetection.

 

Then have a change on a device and check the log: NA/server/log/syslog_wrapper.log

 

Also you can install Wireshark if the NA server is Windows, and if it's Linux use tcpdump.

If you want, you can open a support case to see this closer. 

 

Hope this helps.

 

Regards,

Paul

Frequent Advisor
mamurao
Posts: 58
Registered: ‎02-06-2013
Message 5 of 19 (954 Views)

Re: How to display user name instead of N/A in configuration change report

Hello , 

 

We have NA 9.20 and were noticing the same scenario that NA does not received the ID/change implementer on some devicdes. Is this dependent on the device? as were seeing Id's for other device changes. ? 

 

 

thanks 

 

mark 

HP Expert
_paul
Posts: 242
Registered: ‎05-24-2012
Message 6 of 19 (946 Views)

Re: How to display user name instead of N/A in configuration change report

Hi Mark,

Yes. The Syslog Patterns used for Change Detection are per device type/vendor mainly, and added via Discover Driver task. Still make sure that you have the latest driver pack, and all your devices are supported/tested:

https://hpln.hp.com/node/13521/attachment
https://hpln.hp.com/node/19/contentfiles/?dir=12108

Regards,
Paul

PS If the above are done, and that is still an issue, please raise a support case to check that closer.
Frequent Advisor
mamurao
Posts: 58
Registered: ‎02-06-2013
Message 7 of 19 (889 Views)

Re: How to display user name instead of N/A in configuration change report

Hi Paul, 

 

We ended up working with HP to get a hotfix for specific device Palo Alto and F5 devices that syslog messages does not capture the user change by. We have made a significant improvement as we can see users for both type of devices 

 

thanks paul 

 

mark 

HP Expert
_paul
Posts: 242
Registered: ‎05-24-2012
Message 8 of 19 (882 Views)

Re: How to display user name instead of N/A in configuration change report

Hello Mark,

 

Glad this was solved in the end. If you have any other NA issues or questions do not hesitate to contact us via forum threads or support cases.

 

Have a great day!

 

Best regards,

Paul

Occasional Advisor
SangReal
Posts: 14
Registered: ‎07-21-2013
Message 9 of 19 (864 Views)

Re: How to display user name instead of N/A in configuration change report

Hi,

 

I am also facing the same issue. Most of the devices are showing 'user IDs' while there is any change but few of them are showing N/A.

 

Also we recently updated HP NA 9.10 to 9.20 latest patch but still issue seems to be persist.

 

Regards,

SYED

HP Expert
_paul
Posts: 242
Registered: ‎05-24-2012
Message 10 of 19 (854 Views)

Re: How to display user name instead of N/A in configuration change report

Hi Syed,

 

Did you install the latest July 2013 Driver Pack? If not, please upgrade it: https://hpln.hp.com/node/19/contentfiles

 

Also what are the exact devices: vendor, model, OS, SYSOID?

 

If more investigation is needed we can capture packages using tcpdump or Wireshark. 

 

Let us know on the above. 

 

Best regards,

Paul

Occasional Contributor
syeds
Posts: 6
Registered: ‎04-13-2012
Message 11 of 19 (847 Views)

Re: How to display user name instead of N/A in configuration change report

Hi Paul,

 

I checked the given URL but found only driver pack till May 2013. Driver pack for july is not there.

Please help.

 

 

Regards,

SYED

HP Expert
_paul
Posts: 242
Registered: ‎05-24-2012
Message 12 of 19 (842 Views)

Re: How to display user name instead of N/A in configuration change report

Hi Syed,

 

It seems July is not yet visible for customer use. May Pack is good too. Install that is you have an older one. 

Also if there is the same after reloading the new driver pack, then check if we receive Syslog messages to NA server via WireShark or tcpdump. 

 

If this needs further investigation, perhaps a support case should be raised, and we should have a Webex.

 

Best regards,

Paul

Occasional Advisor
SangReal
Posts: 14
Registered: ‎07-21-2013
Message 13 of 19 (836 Views)

Re: How to display user name instead of N/A in configuration change report

Hi Paul,

 

The count of such devices is very less now and I am analysing if NA is recieving syslog messages at the time of config change or not.

 

We'll definitely share the results and if required we'll raise a support case to troubleshoot it further.

 

Thanks.

 

-SYED

Super Advisor
MohanSekar
Posts: 303
Registered: ‎03-01-2012
Message 14 of 19 (756 Views)

Re: How to display user name instead of N/A in configuration change report

Hello Paul,

 

I am still facing this issue.

 

And please let me know if any special access need to be provided from the device end to retrieve this information.

 

But I see the Change user name in some of the devices but not in all.

 

Also let me know if this username detection will be displayed only if the user is added in NA users list?

 

Thanks

Regards

 

Mohan

HP Expert
_paul
Posts: 242
Registered: ‎05-24-2012
Message 15 of 19 (752 Views)

Re: How to display user name instead of N/A in configuration change report

Hello Mohan,

 

You will need to do the following:

 

1) Make sure the device is configured to send Syslog Messages to NA. If not, run the Configure Syslog task in NA.

2) Make sure that the device sends Syslog Messages to the NA server, via tcpdump or Wireshark. 

3) Set on trace the following: device/management, device/syslog, external/syslog and feature/changedetection

4) Do a change on the device.

5) Check the logs in: NA/server/log/syslog_wrapper.log

 

If you need more details I think this needs to be done easier via a support case.

 

Thanks and regards,

Paul

Super Advisor
MohanSekar
Posts: 303
Registered: ‎03-01-2012
Message 16 of 19 (743 Views)

Re: How to display user name instead of N/A in configuration change report

Hello Paul,

 

I tried running configure syslog task on the devices.

 

But the task is failing due to access problems I guess.

 

Thanks

 

Regards

 

Mohan

HP Expert
_paul
Posts: 242
Registered: ‎05-24-2012
Message 17 of 19 (739 Views)

Re: How to display user name instead of N/A in configuration change report

Hi Mohan,

 

Please check the device access issue, and if that is solved and the issue is still present, then get back to us via a support case to see this closer.

 

Thanks and regards,

Paul

Super Advisor
MohanSekar
Posts: 303
Registered: ‎03-01-2012
Message 18 of 19 (732 Views)

Re: How to display user name instead of N/A in configuration change report

Hello Paul,

 

I am able to take snapshot and run command script or diagnostics on the devices.

 

But when I try to do Configure Syslog it gets failed.

 

Please let me know if there is any privilege level of access required to do that.

 

Thanks

Regards

 

Mohan

HP Expert
_paul
Posts: 242
Registered: ‎05-24-2012
Message 19 of 19 (720 Views)

Re: How to display user name instead of N/A in configuration change report

Hi Mohan,

 

What is the error you get? The user needs to have enough priv to change the configuration and add a new logging line or similar (on regular Cisco this is privilege 15).

 

Also if more investigation is needed we should take this via a support case.

 

Thanks and regards,

Paul

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.