Security

 View Only
last person joined: 16 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

ClearPass Insight Alerts - add drilldown columns and/or edit them

This thread has been viewed 4 times

  • 1.  ClearPass Insight Alerts - add drilldown columns and/or edit them

    Posted Oct 05, 2022 01:19 PM

    Hi,

    In Insight, with version 6.10.7 we've got a number of alerts defined under the "Total Authentication" template.

    We are showing login records which have certain roles. This works. But the "drill down" for the alert only shows Timestamp, ClearPass server, MAC, User, and result. 

    This is insufficient. It makes no sense to have alert filters containing 5 pages of filter terms, while keeping us with only 5 columns of data.

    Can I make a new template that has multiple other fields? Maybe remove the CPPM server, and add device UDID, or something else from the connection, endpoint, or certificate?

    Thanks,
    Ambi



    ------------------------------
    Ambidexter
    ------------------------------