Need a server to log AAA events?

Question

Cisco

Good afternoon. There is a Cisco 2911 router. The task is: Have an AAA server that will register:
1. User login to the router
2. Start and end time of command execution
3. Terminal on which the user is connected
Say it should be either a RADIUS or TACACS + server or possibly use these purposes logserver (like logstash)?
Or give advice on the best way to implement this?
The fact is that you still need to organize a Syslog server, the choice fell on logstash, now you need to decide on the AAA server

Answer 1

TACACS+ is more flexible in terms of access rights and action logging.
RADIUS - more common.
I use both of them, but most of the hardware is on TACACS +