Security

Reply
Guru Elite
Posts: 8,035
Registered: ‎09-08-2010

Application (Admin SSO Login) logs via syslog?

Is there a better way to get Application (Admin UI) access logs via syslog other than using the system logs?


The biggest issue with the system logs is that there are not distinct "field" for username. It is just dumped into the description field.

 

It would be great to have "Application" available inside session logs similar to RADIUS, TACACS, and WEBAUTH where there are distinct fields mapped (Common_Username, Common_Source, etc)

 

splunk-admin-login.png


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Search Airheads
Showing results for 
Search instead for 
Did you mean: