11-08-2016 04:54 AM
Hello I have few questions and doubts about logging in ClearPass.
Is it normal that we have logs only from 7 days (14 max)? What we have to do to have longer history about RADIUS logs??
Is anybody know how to decrease logs size? Is there any best practice for that? In chatty envoirment I notice that logs takes something about 50GB per day. Is it normal?
I will be very appreciated for your answers.
11-08-2016 04:59 AM
long term logs, it's recommended to export to a SIEM.
In terms of log size, that seems very high. Do you have debugs enabled?
Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
11-08-2016 06:21 AM - edited 11-08-2016 06:22 AM
No I don't. All logs levels are set on default (mostly INFO)
Is there any formula or example value showing what logs size is normal.
For example for 100k daily request it will be xxGB?? If you have any example I will be very grateful.
11-08-2016 06:25 AM
--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.
--Problem Solved? Click "Accepted Solution" in a post.