Security

Reply
Guru Elite

Application (Admin SSO Login) logs via syslog?

Is there a better way to get Application (Admin UI) access logs via syslog other than using the system logs?


The biggest issue with the system logs is that there are not distinct "field" for username. It is just dumped into the description field.

 

It would be great to have "Application" available inside session logs similar to RADIUS, TACACS, and WEBAUTH where there are distinct fields mapped (Common_Username, Common_Source, etc)

 

splunk-admin-login.png


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: