Wireless Access

how can I generate this syslog message?

Aug  6 14:41:44  authmgr[5486]: <522010> <5486> <NOTI> |authmgr|  MAC=c0:14:3d:cf:b5:df IP=192.168.128.101 User de-authenticated: name=user3, cause=user request

I already turned on all of the notifications alert but it is still not appearing

(aruba-vmc-active) [mynode] #show running-config | include logging
Building Configuration...
logging security subcat ids level warnings
logging security subcat ids-ap level warnings
logging user process authmgr level notifications
logging user process dot1x-proc level notifications
logging user level notifications
logging user process authmgr subcat all level notifications
logging user process dot1x-proc subcat all level notifications
logging user subcat all level notifications
(aruba-vmc-active) [mynode] #

Try this:

config t

logging user-debug de:ad:be:ef:ca:fe level notifications

That is where de:ad:be:ef:ca:fe is the mac address of the user.  You would then type "show log user-debug all" to see the output.

Hi cjoseph

still same, no de-authenticated logs appeared. What I am currently doing is to generate login and disconnect system logs like this one

Aug 6 09:01:59 authmgr[5486]: <522008> <5486> <NOTI> |authmgr| User Authentication Successful: username=user3 MAC=c0:14:3d:cf:b5:df IP=192.168.128.101 role=guest VLAN=128 AP=AP1 SSID=esni-radius-auth AAA profile=esni-radius-auth_aaa_prof auth method=802.1x auth server=esni-radius

The logs above was generated successfully. No issues.

but when i try to disconnect the wireless user.  I only managed to generate few syslogs. maybe three times(after hours of testing of logging in and disconnecting in the ssid) . I currently don't know what triggered it but the real problem is that it is not real time.

Aug 6 14:41:44 authmgr[5486]: <522010> <5486> <NOTI> |authmgr| MAC=c0:14:3d:cf:b5:df IP=192.168.128.101 User de-authenticated: name=user3, cause=user request