Security

 View Only
last person joined: 2 days ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass Automated Report of Audit Viewer

This thread has been viewed 19 times
  • 1.  ClearPass Automated Report of Audit Viewer

    Posted Jul 06, 2022 02:59 AM
    Hi all,

    Is it possible to generate an automated report of the Audit Viewer contents? In the webinterface of ClearPass Policy Manager I can only view back 7 days of changes in the Audit Viewer. I would like to automatically save/report this data.   

    Thanks in advance!

    ------------------------------
    Lex
    ------------------------------


  • 2.  RE: ClearPass Automated Report of Audit Viewer

    Posted Jul 06, 2022 03:01 PM
    Check out ClearPass Insight for this.  You can configure reports to be sent (Insight must be enabled on your ClearPass cluster).  Also Aruba recommends if you need more than 7 days of retention time to setup an external log collector.


  • 3.  RE: ClearPass Automated Report of Audit Viewer

    EMPLOYEE
    Posted Jul 06, 2022 07:33 PM
    here is a screenshot for it.
    you login to Insight and then choose reports -> Create New Report



    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------



  • 4.  RE: ClearPass Automated Report of Audit Viewer

    Posted Jul 07, 2022 02:49 AM
    Hi Ariyap,

    Thanks for your reply and screenshot. I've setup the System > Configuration report but once I generate a report, the report doesn't show any data. Here's my setup:


    Inside the generated PDF:


    What am I missing?

    ------------------------------
    Lex
    ------------------------------



  • 5.  RE: ClearPass Automated Report of Audit Viewer

    EMPLOYEE
    Posted Jul 07, 2022 03:52 AM
    it works for me, start small, like for past 24 hours and just before that create some roles. so that you'll have some data.
    This is my report.


    then when i run the report , get this




    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------



  • 6.  RE: ClearPass Automated Report of Audit Viewer

    Posted Jul 07, 2022 05:08 AM
    I do get data when I set 'Repeat Sceduled Report' to 'No repeat' and manually select the last 7 days. I will play with those settings to get the weekly setting to work. Thanks!

    ------------------------------
    Lex
    ------------------------------