Security

Reply
Contributor I

Syslog with ClearPass

Hi All

 

I've been testing Clearpass for use with eduroam and am just setting up the logging to our Syslog server. I have created a new Data Filter that looks for ( Common:Service CONTAINS eduroam ), and the logging is working for Accepts and Rejects. During my testing I took too long to login and received a TIMEOUT in Access Tracker, however this was not logged to Syslog. Does anyone know why Timeouts are not logged to Syslog.

 

Clearpass Version is 6.5.7

 

Thanks

 

Dave

Guru Elite

Re: Syslog with ClearPass

Is that the only rule in the data filter?

When you apply the same data filter in Access Tracker, are the timeouts also not visible?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor I

Re: Syslog with ClearPass

Hi Tim

 

Yep, that is the only rule in the data filter.

When I apply the filter to access tracker I can see the timeouts but I can't see them in Syslog, I can see every other request for that service but not the timeouts.

 

Thanks

 

Dave

Guru Elite

Re: Syslog with ClearPass

If you’re seeing them in AT, you should be seeing them via Syslog. Please open a TAC case.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Guru Elite

Re: Syslog with ClearPass

If you’re seeing them in AT, you should be seeing them via Syslog. Please open a TAC case.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: