Security

 View Only

  • 1.  How to send from ClearPass to Syslog location and SSID info

    Posted Feb 15, 2024 05:39 AM

    Hi community,

    We need that ClearPass will sent a syslog message to Syslog server, caring a session logs which we are seeing in Access Tracker, and specifically Radius request attributes, like location and SSID name.

    We can't find related filter in Syslog configuration.

    Is there a away to send this information towards syslog? Can 'Option 2' (making a specific SQL query) help with this?

    Thank you.



  • 2.  RE: How to send from ClearPass to Syslog location and SSID info
    Best Answer

    Posted Feb 15, 2024 05:50 PM

    Couple thoughts/questions:

    What version of Clearpass?

    Do you have Insight Enabled?

    If so, change your Export filter to "Insight Logs"

    Data filter to "RADIUS Authentication" > Type to "RADIUS"

    Radius.SSID, as well as several others are available there. 



    ------------------------------
    If my post was useful, please Accept Solution and Give Kudos.
    ------------------------------
    Zak Chalupka
    Principal Engineer - HPE Aruba
    ACDX | ACMP | ACSP | ACCP
    wifizak@hpe.com
    ------------------------------
    Ideas expressed here are solely my own and not necessarily that of HPE Aruba.
    ------------------------------

    Original Message


  • 3.  RE: How to send from ClearPass to Syslog location and SSID info

    Posted Feb 19, 2024 02:03 AM

    Thank you @802.zak for response.

    We are currently on 6.11.3 version, and Yes Insight DB is enabled. We'll will definitely try your suggested syslog filter, maybe them will be enough for client.


    Original Message


  • 4.  RE: How to send from ClearPass to Syslog location and SSID info

    Posted 4 days ago
    Edited by want to become aruba master yesterday

    Try Auth.AP-Name Auth.SSID instead of radius.Accesspoint and radius.SSID


    Original Message


Related Content