Network Management

Reply
nkj
Occasional Contributor I

Airwave 8.2.1.1 and Splunk

We have a requirement to start sending logs from Airwave to Splunk.  I see previous discussions in this forum using ClearPass to Splunk. Can we send logs directly from Airwave to Splunk?  Any configuration is appreciated.

Aruba Employee

Re: Airwave 8.2.1.1 and Splunk

Hi

 

We could forward logs from Airwave to external syslog server. Navigate to AMP Setup > General> Exteranl logging section to configure.

 

Regards,

Pavan

nkj
Occasional Contributor I

Re: Airwave 8.2.1.1 and Splunk

Thanks for the reply, I will test during the next maintenance window.  

 

New Contributor

Re: Airwave 8.2.1.1 and Splunk

Hello,

 

What type of data are you trying to correlate? You can configure Airwave to send to an external syslog from the AMP Setup -> General page.

 

You can integrate Splunk into AirWave using the API so you can lookup a MAC address inside of Splunk and have it show you data from ClearPass, controller syslogs and AirWave.

 

Hope this helps, Thanks.

SandraLynn
Occasional Contributor II

Re: Airwave 8.2.1.1 and Splunk

SandraLynn

 

I don't suppose you have details on setting up this API integration?

 

Any suggested starting points?

 

Glen.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: