Security

 View Only

Clearpass - Audit Log Filter to Syslog

This thread has been viewed 4 times
  • 1.  Clearpass - Audit Log Filter to Syslog

    Posted Jan 31, 2019 10:37 AM

    Currently have Clearpass sending logs out to an external syslog server.  It's sending audit log entries over which was fine until MDM was integrated.  The logs are sending thousands of messages which are only updating the "last check-in" MDM information in the endpoint database.  Looking to filter out these endpoint modify messages so they don't get sent to syslog, though I don't see any option to do so.  Is there a way to limit these endpoint modify entries?