Event Notifications are displayed on the CLI session

Event Notifications are displayed on the CLI session

Problem:
When a user connects to the CLI session, event notifications are displayed as part of the CLI session like:

  1. 2021 Jan 01 00:00:00 nodegrid Event Notification from nodegrid. Reported on 2020-01-01T00:00:00Z. Event ID 200: A user logged into the system. User: user@192.168.1.1. Session type: SSH. Authentication Method: TACACS+.

Cause:
Event Notifications are getting pushed to administrators CLI session based on a setting in the Syslog Auditing settings. By default this setting is turned off and no events are pushed to admin session, but when enabled all events will be pushed to all admin sessions. This includes all users which are part of the admin group.

Resolution:
Turn off the setting 'admin_session' in the Syslog Destination settings

WebUI

CLI
  1. [admin@nodegrid settings]# cd /settings/auditing/destinations/syslog/
  2. [admin@iegsr nodegrid]# set admin_session=no
  3. [admin@iegsr nodegrid]# commit

    • Related Articles

    • How to: Set up ZPE Cloud event notifications

      This document describes the process to set up ZPE Cloud event notifications. Define events you want to receive notifications 1. Login to ZPE Cloud as admin. 2. Go to Settings :: Notification :: Events You can select enable notifications based on ...

    • How to Send Syslog Messages to a Different IPV4 or IPV6 Socket Port

      If you need to send syslog messages to a remote server that is not listening on the standard ports, you can specify the port on the input string for syslog server in the CLI or GUI. From the GUI, navigate to Auditing-->Destinations-->Syslog, then ...

    • How to: Set up ZPE Cloud event notifications to be received on a distribution group

      In ZPE Cloud, you can configure event notifications to be sent to any user in your ZPE Cloud instance. For some companies, it is desirable to send notifications to a distribution group or list (DL) and members of the DL do not or should not have ...

    • Nodegrid CLI - Add banner message with multiple lines

      The CLI command to add a login banner message with multiple lines, can be entered all on a single line. This is sometimes required when using automation tools. The 'set banner=' command requires the text to be inside double quotes and the ...

    • How to Send Syslog Messages to a Different Socket Port?

      If your Remote Syslog Server has its socket port set with a different port e.g. 5514 (default is 514), you can modify the NodeGrid syslog-ng configuration to accommodate this situation. Here's how: Log in as admin to NodeGrid WebUI Go to Auditing :: ...