Security

Reply
Super Contributor I
Posts: 303
Registered: ‎02-07-2013

Clearpass access-tracker filter, can we have a "does not contain" option

Hi,

When using live monitoring/access tracker you can filter results using "contains" or "equals"

 

Our clearpass servers are accessed via an F5 load balancer so theres a LOT of F5 health check auths going on as well.... so many in fact that it in general it floods the Access Tracker window. It would be nice to be able to set up a filter to say for example "username does not equal / contain f5healthcheck"  so I can actually see what;s going on with real traffic instead of the "noise" of health checking

Rgds

A

Guru Elite
Posts: 8,637
Registered: ‎09-08-2010

Re: Clearpass access-tracker filter, can we have a "does not contain" option

You can do this by creating a custom data filter under the view settings at the top of Access Tracker. This is a great way to hide AirGroup Authorization requests as well.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Super Contributor I
Posts: 303
Registered: ‎02-07-2013

Re: Clearpass access-tracker filter, can we have a "does not contain" option

Cool!

Just what I wanted

 

Thx

Alex

Guru Elite
Posts: 8,637
Registered: ‎09-08-2010

Re: Clearpass access-tracker filter, can we have a "does not contain" option

If you're exporting access logs via Syslog, you can also use these data filters to filter that data as well.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Super Contributor I
Posts: 303
Registered: ‎02-07-2013

Re: Clearpass access-tracker filter, can we have a "does not contain" option

Even better.

I'm actually waiting for 6.5 to come out so I can proxy accounting off to another server. Our FreeRadius service dumps stuff into a mysql DB, so it would be nice to havde all radius accounting in the same place ....

A

Search Airheads
Showing results for 
Search instead for 
Did you mean: