Implementing Cisco Application Centric Infrastructure (DCACI) — Question 329

An engineer wants to record the login and configuration change events in a Cisco ACI environment. The requirements are to send the records to a syslog server, but to exclude fabric-related or tenant-related events. Which action accomplishes this goal?

Answer options

• A. Configure the default monitoring policy in the access policies to include the audit logs.
• B. Configure the forwarding facility of the remote destination in the external data collectors to Iocal7.
• C. Configure the syslog source Min Severity to the information level in the access policy.
• D. Configure the local file destination severity to debugging level in the external data collectors.

Correct answer: B

Explanation

The correct answer is B because configuring the forwarding facility to Iocal7 allows for the exclusion of fabric and tenant-related events while still capturing the necessary logs. Option A does not focus on the exclusion criteria, C only adjusts severity levels without addressing the forwarding details, and D pertains to local file logging rather than syslog forwarding.