CLI Command to check Authentication Activity

[Hawkeye_Parker]

Hi Checkmates, 

Do we have any CLI command to check the device Authentication activity? I need to get the below details in CLI.

[G_W_Albrecht]

In Identity Awareness Administration Guide R80.20 p.161ff you will find the CLI commands for IA - adlog, pdp and pep !

[Tal_Paz-Fridman · Accepted solution]

Hi 

You can try the command cpstat identityServer -f <value> where the value can be:

default, authentication, logins, ldap, components, adquery, idc, muh

For example cpstat identityServer -f ldap gives:

Successful LDAP Queries: -
Unsuccessful LDAP Queries: -

For example cpstat identityServer -f ldap gives:

CaptivePortal: -
AD Query: -
Agent: -
Terminal Server: -
RADIUS Accounting: -
Remote Access: -
Identity Collector [Active Directory]: -
Identity Collector [Cisco ISE]: -
Identity Collector [Syslog]: -
Identity Collector [eDirectory]: -
Identity Awareness API: -
Users With Anti-Spoofing Protection: -
Successful User Logins [Kerberos]: -
Successful Machine Logins [Kerberos]: -
Successful User Logins [User name and password]: -
Successful User Logins [AD Query]: -
Successful Machine Logins [AD Query]: -
Unsuccessful User Logins [Kerberos]: -
Unsuccessful Machine Logins [Kerberos]: -
Unsuccessful User Logins [User name and password]: -

HTH

Tal