We have been dealing with some thefts lately and I'm trying to find who was roaming or associated with a particular access point at a given time range in the past 30 days. I can easily get association time within AirWave, but it doesn't necessarily cover roaming if the original association was on another AP. Does anyone have instructions for how to access this information via AirWave 18.104.22.168? Controller is 7205 with AOS 22.214.171.124. Thank you!
Airwave only takes samples at 5 minute intervals, so it will not have the resolution you needed. Unless you had user debug logging enabled sending that information to a syslog server you would not be able to have that information at the resolution you need.
I just turned on the debugging per this article https://community.arubanetworks.com/t5/Community-Tribal-Knowledge-Base/How-to-Monitor-Client-Roaming-via-Syslog-commandline-and-Airwave/ta-p/85404 (by you cjoseph!)
If I ssh'd in and ran "config t logging level debugging user" I should be all set going forward, correct?
You would need to configure syslog on that controller to log to a syslog server. The controller has limited space and the records will roll over and be erased. User debugging generates TONS of information.
And....enabling user debugging can lead to higher CPU on your controller.....
At Aruba, we believe that the most dynamic customer experiences happen at the Edge. Our mission is to deliver innovative solutions that harness data at the Edge to drive powerful business outcomes.
© Copyright 2021 Hewlett Packard Enterprise Development LPAll Rights Reserved.