Using the accounting log, Accounting log file format – RSA Security 6.1 User Manual

Page 89

Advertising
background image

RSA RADIUS Server 6.1 Administrator’s Guide

Logging

77

By default, RADIUS system log files are located in the RADIUS database
directory. You can specify an alternate destination directory in the [Configuration]
section of the

radius.ini

file.

Using the Accounting Log

RADIUS accounting events are recorded in the accounting log file. Accounting
events include START messages, which indicate the beginning of a connection;
STOP messages, which indicate the termination of a connection; and INTERIM
messages, which indicate a connection is ongoing.

Accounting log files use comma-delimited, ASCII format, and are intended for
import into a spreadsheet or database program. Accounting log files are located
in the RADIUS database directory area by default, although you can specify an
alternate destination directory in the [Configuration] section of the

account.ini

file. Accounting log files are named

yyyymmdd

.

act

, where

yyyy

is the four-digit year,

mm

is the month, and

dd

is the day on which the log file was

created.

The current log file can be opened while RSA RADIUS Server is running.

Accounting Log File Format

The first six fields in every accounting log entry are provided by
RSA RADIUS Server for your convenience in reading and sorting the file:

X

Date

- the date when the event occurred

X

Time

- the time when the event occurred

X

RAS-Client

- the name or IP address of the RADIUS client sending the

accounting record

X

Record-Type

- START, STOP, INTERIM, ON, or OFF, the standard

RADIUS accounting packet types

X

Full-Name

- the fully distinguished name of the user, based on the

authentication performed by the RADIUS server

X

Auth-Type

- a number that indicates the class of authentication performed:

By default, the standard RADIUS attributes follow the

Auth-Type

identifier.

See

“Standard RADIUS Accounting Attributes” on page 79

.

You can include vendor-specific attributes if the device sending the accounting
packet supports them. For more information on using vendor-specific attributes,
refer to the RSA RADIUS Server 6.1 Reference Guide.

Advertising