Security

Reply
Contributor II

ClearPass Policy Manager syslog configuration

Hello,

 

is there any way to modify the facility level in ClearPass Policy Manager's syslog configuration?

 

A tcpdump on the syslog server shows that CPPM sends all messages with a facility of local1:

 

12:28:16.185134 IP aruba-cppm.abc.de.37789 > server.abc.de.syslog: SYSLOG local1.debug, length: 96
12:28:19.669750 IP aruba-cppm.abc.de.37789 > server.abc.de.syslog: SYSLOG local1.info, length: 584

 

I haven't found the appropriate switch yet - if there is one to find...

 

Thanks for your help!

 

cheers,

Harald

Aruba

Re: ClearPass Policy Manager syslog configuration

If you go to (Administration » Server Manager » Log Configuration) you can select the level of information you receive. 

 

syslog.png

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Regular Contributor I

Re: ClearPass Policy Manager syslog configuration

How about the ability to change facility (local level)?. ClearPass defaults to facility (local) 1. All of our wireless logs are on local 0 (local 1 is heavily userd for other services).

 

Anyone know how to change syslog facility level?

 

Thanks,

Mike

MVP

Re: ClearPass Policy Manager syslog configuration

Mike, did you ever get an answer to this?

==========
Ryan Holland, ACDX #1 ACMX #1
The Ohio State University
Aruba

Re: ClearPass Policy Manager syslog configuration

In syslog there is local1 - local 7

 

locallevels.png

 

In CPPM we give you the option to choose 5 of the levels

 

syslog.png

 

 

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
MVP

Re: ClearPass Policy Manager syslog configuration

I understand that debug/info/warn/error/fatal levels are all available. However, I want to send logs to local5 on our syslog server. Can I modify the facility to which logs are sent?

- Ryan -
==========
Ryan Holland, ACDX #1 ACMX #1
The Ohio State University
Aruba

Re: ClearPass Policy Manager syslog configuration

Ryan,

As of today we only output syslog at level 1.

Talk with Ted today and we can file a feature request.
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: