Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).

ClearPass Audit row details as email notification thru a syslog server

This thread has been viewed 9 times
  • 1.  ClearPass Audit row details as email notification thru a syslog server

    Posted 23 days ago

    Hello, I am trying to create a syslog export filter that forwards the audit row details  to my syslog server which would forward the information to my email mailing list the same way a Cisco switch SNMP config trap can be forwarded to a SolarWinds NCM instance which sends an email with the before and after configuration difference. Does this require any custom SQL filters? The same way a Cisco switch SNMP config trap can be forwarded to a SolarWinds NCM instance which send an email with the before and after configuration difference. 

    Thanks.

    Filter:
    Name:
    Copy_of_[ClearPass Configuration Audit]
    Description:
    All ClearPass Configuration Audit
    Type:
    Insight
    Template:
    ConfigAudit
    Configuration Type:
    Select Attributes
    Custom SQL:
     
    Rules:
    Rules Evaluation Algorithm:
    MATCHES_ALL
      Conditions  
    1. ( CppmConfigAudit:Action EXISTS )