HP Intelligent Management Center v5.1 TACACS+ Authentication Manager Administrator Guide

107
3. Click the Advanced Query link on the upper right side of the Query Authentication Logs area.
4. You can perform an advanced query if you see Basic Query on the upper right side of the Query
Authentication Logs area.
5. Enter or select one or multiple of the following query criteria:
 Account Name—Enter the account name of the device user. TAM supports fuzzy matching for
this field. For example, if you enter sam, all authentication logs with account names containing
sam are queried.
 Result—Select an authentication result, Succeeded or Failed from the list.
 Authentication Time From/To—Enter an authentication time range for a device user, in the
format of YYYY-MM-DD hh:mm. Or select an authentication time range. Click the Calendar
icon on the left. On the upper part of the window that appears, select the date, and on the
lower part, enter the time. The date and time determine the start time of the authentication time
range. Click the Calendar icon on the right. On the upper part of the window that
appears, select the date, and on the lower part, enter the time. The date and time determine the
end time of the authentication time range. If you only specify the start time, the authentication
time range is from the start time to 9999-01-01 00:00. If you only specify the end time, the
authentication time range is from 2000-01-01 00:00 to the end time. If you select both the start
time and end time, the authentication time range is from the start time to the end time.
 Device User Group—Click the Select User Group icon. The Select Device User Group
window appears. Select a group and click OK. To clear your selection, click the Clear icon
.
 User Status—Select a user state, Normal or Cancelled from the list. Normal indicates the user
is in normal state. Cancelled indicates the user is already cancelled.
 Device IP From/To—Enter an IP address range for the device. If you only enter the start IP
address, the range is from the start IP address to 255.255.255.255. If you only enter the end
IP address, the range is from 0.0.0.0 to the end IP address. If you enter both the start IP address
and end IP address, the range is from the start IP address to the end IP address. The end IP
address must be no smaller than the start IP address. You must enter a complete IPv4 address
in each field.
 User IP From/To—Enter an IP address range for the device user. If you only enter the start IP
address, the range is from the start IP address to 255.255.255.255. If you only enter the end
IP address, the range is from 0.0.0.0 to the end IP address. If you enter both the start IP address
and end IP address, the range is from the start IP address to the end IP address. The end IP
address must be no smaller than the start IP address. You must enter a complete IPv4 address
in each field.
 Privilege Level—Enter a privilege level of the device user. TAM queries authentication logs of
the specified level. If a device user has a privilege level of 3, TAM records the authentication
logs of the device user as level 3 authentication logs.
 Session ID—Enter the session ID used for packet exchanges between the device and TAM for
the authentication. TAM only supports exact matching for this field.
 Action—Select an action for the authentication. Actions can be Login Authentication, Change
Password, and Send Authentication. TAM only supports Login Authentication.
 Authentication Type—Select an authentication type used by the device and TAM to
authenticate the device user. Options include ASCII, PAP, and CHAP. The authentication type
is configured on the device. Most devices only support ASCII.
 Service Type—Select a service type for the authentication. Options include Login, Enable, and
None. Login indicates the user is authenticated for device login. Enable indicates the user is