An engineer wants to monitor all configuration changes, threshold crossing, and link-state transitions in a Cisco ACI fabric. Which action must be taken to receive the required messages?
A.
Add Faults and Events to the monitor policy.
B.
Add Session Logs and Audit Logs to the monitor policy.
C.
Include Audit Logs and Events in the Syslog source policy.
D.
Include Events and Session Logs in the Syslog source policy.
Events – Holds records of system related events (i.e., link state transitions, Logged Contract hits)
Audit Logs – Records user-initiated events (i.e., logins, configuration changes)
https://unofficialaciguide.com/2018/08/11/configuring-syslog-for-aci/
Unsure on this .....
"Monitoring configuration changes" - you can see within the events logs which suggest they have occurred due to configuration change, the audit logs of course give more detail which makes this question confusing as you would think Audit logs are required to view all the configuration changes.
When reading Cisco whitepaper there is a statement which says "Any configuration or state change in any MO is considered an event".
a threshold crossing. This is something which I think is specific to the faults which made me think it was A.
However these selections I believe are made within the Syslog Source Policy. You tick each one.
It is A
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/b_APIC_Faults_Errors/b_IFC_Faults_Errors_chapter_011.html
Correct Answer : A .
https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2020/pdf/BRKACI-2271.pdf
Syslog Overview
35BRKACI-2271
• Syslog is a method to collect messages (Faults, Events, Audit, Session) from devices
to a server running a syslog daemon.
• During operation, a Fault or Event in ACI system can trigger the sending of a system
log (syslog) message to the console and/or to an external logging server.
• Fault-generated system messages are triggered by:
– A fault rule.
– A threshold crossing
– A failure of a task or Finite State Machine (FSM) sequence.
• Event-generated system messages are triggered by:
– An event rule.
– An event in NX-OS of Leaf/Spine.
Syslog like SNMP Traps are also enabled
upvoted 2 times
...
This section is not available anymore. Please use the main Exam Page.300-620 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
zelya19
8 months, 3 weeks agoMarinheiro
6 months, 2 weeks agoHuberttheman
9 months, 4 weeks agosailorsoul
10 months agoMaccc10
12 months agohebdeb
1 year, 4 months agoS_1292_A
1 year, 4 months agoJohn771
1 year, 6 months agoJohn771
1 year, 6 months agocooljit
1 year, 7 months ago