How to determine the device toolkit user that executed process restart from ion cli ?
3453
Created On 11/03/22 01:24 AM - Last Modified 07/26/25 06:31 AM
Objective
How to determine the device toolkit user that executed process restart from ion cli ?
Environment
- Prisma SD-WAN
- ION devices
- Process restart
- Strata Cloud Manager
- Prisma SASE
- SASE
Procedure
The device toolkit user who has restarted ION device process can be identified from below command
debug logs dump authpriv | grep <process_name>
Example: rtr_mgr_api restart event by a user from ion cli can be identified as follows:
debug logs dump authpriv | grep rtr_mg_api
2099-10-29T23:57:05.687 not sudo authpriv pam-all text:xxxxx : TTY=pts/0 ; PWD=/log/home/xxxxxx ; USER=xxxx ; COMMAND=/usr/bin/supervisorctl restart rtr_mgr_api, _event:✓Additional Information
Prisma SDWAN ION CLI Reference.pdf