Network Management

Reply
New Contributor
Posts: 2
Registered: ‎03-21-2016

Need to configure Aruba Controller for syslogs to external server & ap logs need to suppressed

Hi 

We are trying to configure Aruba Controller with IBM Qradar Syslog server and not able to suppress ap logs to the IBM Qradar Syslog server. 

We need logs from the Mobility controller only not from all AP's.

 

config at wlc (Aruba Controller)

voice logging

logging 192.168.X.X type network severity informational facility local7

logging 192.168.X.X type security severity informational facility local7

logging 192.168.X.X type system severity informational facility local7

 

AP logs received at IBM Qradar ( Syslog server)

<190>Apr 18 04:08:07 2016 172.21.11.58 stm[6795]: trace_on: tracing to "/var/log/trace/stm.log" started

<190>Apr 18 04:01:39 2016 172.21.11.58 stm[6795]: trace_rotate_file: rotating /var/log/trace/stm.log

<188>Apr 17 23:23:07 2016 172.21.11.36 sapd[4871]: <404068> <WARN> |AP MXXoom@172.X.X.X sapd|  AM 94:b4:0f:84:a9:a0: ARM Noise Threshold Trigger Current Channel 6 new_rra 11/6

Device Stopped Sending Events (Firewall, IPS, VPN or Switch)

 

Guru Elite
Posts: 19,982
Registered: ‎03-29-2007

Re: Need to configure Aruba Controller for syslogs to external server &amp; ap logs need to supp

What kind of logs do you want?  AP messages are part of system messages, so there is no way to turn them off if you desire system messages.  The typical logging level is warnings.  Informational is much more verbose, and that could be why you are seeing so many messages.  Try a logging level of warnings on the system log to get less messages.

Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
New Contributor
Posts: 2
Registered: ‎03-21-2016

Re: Need to configure Aruba Controller for syslogs to external server &amp; ap logs need to supp

hi joseph

Thanks for reply.

We need controller related logs only. 

As per your reply, its clear that we don't have an option to configure it


cjoseph wrote:

What kind of logs do you want?  AP messages are part of system messages, so there is no way to turn them off if you desire system messages.  The typical logging level is warnings.  Informational is much more verbose, and that could be why you are seeing so many messages.  Try a logging level of warnings on the system log to get less messages.



.

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: