11-05-2013 06:10 AM
I'm looking to generate a report from Airwave or a trigger option to collect administrative logins to the Airwave server as well as to the Controller. Is this possible using Airwave or direct from the controller?
I can run #show audit-trail login manually but would prefer an automated solution especially since I can only use a single output modifier from CLI.
Solved! Go to Solution.
11-05-2013 08:04 AM - edited 11-05-2013 02:14 PM
Are you using TACACS? (ClearPass)
TACACS accounting will log all commands if configured:
Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
11-06-2013 09:38 AM
You can potentially use this :
This pointed me a good direction for the controller. Do you know of a similar command on the airwave CLI that would get me info for the GUI? I'm sure I can pull CLI info from a log file somewhere.
11-06-2013 10:16 AM - edited 11-06-2013 10:18 AM
I don't see this available on the list of commands you can run from AIrwave
I can't see it from the trap list either
SNMP TRAP LIST -------------- TRAP-NAME CONFIGURABLE ENABLE-STATE --------- ------------ ------------ authenticationFailure Yes Enabled coldStart Yes Enabled linkDown Yes Enabled linkUp Yes Enabled warmStart Yes Enabled wlsxAPBssidEntryChanged Yes Enabled wlsxAPChannelChange Yes Enabled wlsxAPDeauthContainment Yes Enabled wlsxAPEntryChanged Yes Enabled wlsxAPImpersonation Yes Enabled wlsxAPInterferenceCleared Yes Enabled wlsxAPInterferenceDetected Yes Enabled wlsxAPModeChange Yes Enabled wlsxAPNumColdStarts Yes Enabled wlsxAPNumDown Yes Enabled wlsxAPNumRadioDown Yes Enabled wlsxAPNumUpgradeFailure Yes Enabled wlsxAPNumWarmStarts Yes Enabled wlsxAPPowerChange Yes Enabled wlsxAPRadioAttributesChanged Yes Enabled wlsxAPRadioEntryChanged Yes Enabled wlsxAPSpoofingDetected Yes Enabled wlsxAPTaggedWiredContainment Yes Enabled wlsxAPWiredContainment Yes Enabled wlsxAccessPointIsDown Yes Enabled wlsxAccessPointIsUp Yes Enabled wlsxAdhocNetwork Yes Enabled wlsxAdhocNetworkBridgeDetected Yes Enabled wlsxAdhocNetworkBridgeDetectedAP Yes Enabled wlsxAdhocNetworkBridgeDetectedSta Yes Enabled wlsxAdhocNetworkDetected Yes Enabled wlsxAdhocNetworkRemoved Yes Enabled wlsxAdhocUsingValidSSID Yes Enabled wlsxApFloodAttack Yes Enabled wlsxAuthMaxAclEntries Yes Enabled wlsxAuthMaxBWContracts Yes Enabled wlsxAuthMaxUserEntries Yes Enabled wlsxAuthServerIsUp Yes Enabled wlsxAuthServerReqTimedOut Yes Enabled wlsxAuthServerTimedOut Yes Enabled wlsxBSSIDIsDown Yes Enabled wlsxBSSIDIsUp Yes Enabled wlsxBlockAckAttackDetected Yes Enabled
This could be a feature request :
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA