Security

Reply
Frequent Contributor II
Posts: 149
Registered: ‎04-20-2009

session logs for RADIUS requests. sometimes are empty.

I am seeing an odd thing with the session logs on my ClearPass deployment.

When I open up the details window for a RADIUS Request and click the show logs button, sometimes the logs are there and sometimes they are not. When the log is missing, a message saying "No Logs for this Session".

 

Other RADIUS requests from the same service are present.

 

Anyone know why this is happening?

Guru Elite
Posts: 20,578
Registered: ‎03-29-2007

Re: session logs for RADIUS requests. sometimes are empty.

 If something was processed, something should be there.  What was the exact result of the request? 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

MVP
Posts: 4,175
Registered: ‎07-20-2011

Re: session logs for RADIUS requests. sometimes are empty.

What version of ClearPass do you have installed ?

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Frequent Contributor II
Posts: 149
Registered: ‎04-20-2009

Re: session logs for RADIUS requests. sometimes are empty.

[ Edited ]

It does not seem to matter what the result of the request is it happens for both REJECTS and ACCEPT.  In the case of accepted authentications the role mappings and policies are being replied and the correct VSAs are being returned to the controllers.

 

I am trying to figure out if the requests which have no logs are all on the same node in the cluster or perhaps from the same wireless controller.

Frequent Contributor II
Posts: 149
Registered: ‎04-20-2009

Re: session logs for RADIUS requests. sometimes are empty.

Running version 6.2.4.5 appliance with 1 publisher and 1 subscriber.

Guru Elite
Posts: 8,191
Registered: ‎09-08-2010

Re: session logs for RADIUS requests. sometimes are empty.

We see this on 6.2.4 as well.


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Frequent Contributor II
Posts: 149
Registered: ‎04-20-2009

Re: session logs for RADIUS requests. sometimes are empty.

Did a little more poking around and it seems that the older the RADIUS request, the greater the likelihood the log will be missing.

If I look at requests from 12 hours ago, they are almost all gone but the most recent requests are all intact.

 

 

Aruba
Posts: 1,537
Registered: ‎06-12-2012

Re: session logs for RADIUS requests. sometimes are empty.

Is this after a certain date you are seeing this? Remember there is a setting in the cluster wide properties that allow you to retain the data longer. Just remember that can fill up the HD space if you are running in debug or you have a lot of clients connecting or reconnecting. 

 

sessionlog.png

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Frequent Contributor II
Posts: 149
Registered: ‎04-20-2009

Re: session logs for RADIUS requests. sometimes are empty.

My Cleanup intervals are all set to the defaults so I should see logs for 7 days.

If I go back 24 hrs. the logs from the previous day are missing for certain.

As far as I can tell the threshold is 12 hrs.  If I look at sessions from 11hrs ago the logs are still there.

 

Aruba
Posts: 1,537
Registered: ‎06-12-2012

Re: session logs for RADIUS requests. sometimes are empty.

Please open a TAC case so they can look into it
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: