Controllerless Networks

last person joined: 2 days ago 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

How do I send aruba virtual controller logs to my syslog server?

This thread has been viewed 3 times

  • 1.  How do I send aruba virtual controller logs to my syslog server?

    Posted Oct 04, 2013 02:57 PM

    I put the syslog server IP address into the settings on the virtual controller. 

     

    I then created a config file in /etc/rsyslog.d called 30aruba.conf containing this: 

     

    :rawmsg, contains, "sn=Instant-C4:57:3B" /var/log/arubawireless.log
    & ~

     

    I set the log level to debug and restarted rsyslog, but still nothing is coming through. I also know that rsyslog is listening on UDP 514. 

     

    Am I missing something? Any help is appreciated, 



  • 2.  RE: How do I send aruba virtual controller logs to my syslog server?

    EMPLOYEE
    Posted Oct 07, 2013 12:08 PM

    What do your IAP ACL's look like? are you permitting the necessary UDP ports?

     

    If you don't have an explicit 'allow all', you can add a network specifc ACL for UDP 514 by doing the following from the PEF tab in the IAP:

     

    Untitled.png



  • 3.  RE: How do I send aruba virtual controller logs to my syslog server?

    Posted Oct 08, 2013 12:02 PM
      |   view attached

    For each SSID in PEF I have allowed UDP 514 to our syslog server. See attached picture. 

     

    I also set each facility to warning to help get more logs sent. 

     

    I suspect it's maybe something with my /etc/rsyslog.d/30aruba.conf file which looks like this: 

     

    :rawmsg, contains, "aruba" /var/log/arubawireless.log
    & ~

     

    Any suggestions?



  • 4.  RE: How do I send aruba virtual controller logs to my syslog server?

    Posted Oct 08, 2013 12:03 PM
      |   view attached

    Here is the syslog config. 



  • 5.  RE: How do I send aruba virtual controller logs to my syslog server?

    EMPLOYEE
    Posted Oct 08, 2013 06:18 PM

    tyosick, can you confirm the IAP is sending the syslog OUT via an uplink pcap?  Optically what you have confiugred looks correct.