Configuring a Cisco Access Control Server (ACS)

Firmware: 3.x

CollectorA TLC module that gathers or receives log messages from Log Sources.: File CollectorA type of Collector that gathers log messages from Log Sources that store messages in an ASCII log file.

To configure a Cisco Access Control Server (ACS) to send log messages to TLC, install Cisco Secure ACS Remote Agent on the host that will store the log files. By default, the Agent software is installed in the following locations.

Windows: C:\Program Files\Cisco\CiscoSecure ACS Agent

Solaris: /opt/CSCOacsag

When you configure the Monitored AssetAn object in the TLC Configuration Manager that represents a Log SourceAny log-generating application, operating-system service, database instance, or device from which TLC collects log messages. from which TLC collects log messages directly. for the Log Source (see Step 6. Configure your Monitored Assets), you should add the log files in the following directories on the host in the File CollectionThe gathering or receipt of log messages from Log Sources. tab of the Monitored AssetA Log Source in your TLC environment. See Monitored Assets and Discovered Assets.'s properties dialog (see Table 51):

AdminAudit

Backup and Restore

DbSync

Failed Attempts

Passed Authentications

RADIUS Accounting

Service Monitoring

TACACS+ Accounting

TACACS+ Administration

VoIP Accounting

Next	If you are performing initial configuration of your TLC environmentConsists of all TLC software, Managers, Log Sources, Monitored Assets, Collectors, and data in your TLC installation., see Configuring your TLC Environment. Otherwise, see Adding a Monitored Asset for a new Log Source.