Security

 View Only
Back to discussions
Expand all | Collapse all

ClearPass Audit row details as email notification thru a syslog server

This thread has been viewed 9 times

  • 1.  ClearPass Audit row details as email notification thru a syslog server

    Posted May 29, 2024 03:40 PM
    Edited by vvajpeyi May 29, 2024 04:49 PM

    Hello, I am trying to create a syslog export filter that forwards the audit row details  to my syslog server which would forward the information to my email mailing list the same way a Cisco switch SNMP config trap can be forwarded to a SolarWinds NCM instance which sends an email with the before and after configuration difference. Does this require any custom SQL filters? The same way a Cisco switch SNMP config trap can be forwarded to a SolarWinds NCM instance which send an email with the before and after configuration difference. 

    Thanks.

    Filter:
    Name:
    Copy_of_[ClearPass Configuration Audit]
    Description:
    All ClearPass Configuration Audit
    Type:
    Insight
    Template:
    ConfigAudit
    Configuration Type:
    Select Attributes
    Custom SQL:
     
    Rules:
    Rules Evaluation Algorithm:
    MATCHES_ALL
      Conditions  
    1. ( CppmConfigAudit:Action EXISTS )


Related Content