Hello,
is there any way to modify the facility level in ClearPass Policy Manager's syslog configuration?
A tcpdump on the syslog server shows that CPPM sends all messages with a facility of local1:
12:28:16.185134 IP aruba-cppm.abc.de.37789 > server.abc.de.syslog: SYSLOG local1.debug, length: 96
12:28:19.669750 IP aruba-cppm.abc.de.37789 > server.abc.de.syslog: SYSLOG local1.info, length: 584
I haven't found the appropriate switch yet - if there is one to find...
Thanks for your help!
cheers,
Harald