TACACS+ Account Logs

the kron pam tacacs+ access manager is used for tacacs+ authentication for network devices policy enforcement can also be applied to network devices that use the kron pam tacacs+ access manager all commands executed during the session can be viewed in the tacacs account log menu, along with the following information username, host ip used to connect, command run, policy enforcement, user privilege level, host port type, client ip, log time, and instance name to access the tacacs account logs navigate to logging > tacacs account log fill in the fields to filter and click the search button