Security

 View Only

Missing Alert field in ClearPass Insight Syslog Export Filter

This thread has been viewed 9 times
  • 1.  Missing Alert field in ClearPass Insight Syslog Export Filter

    Posted Nov 06, 2024 04:22 AM

    Hi folks,

    I'm currently working with the ClearPass export filters. The Insight log template almost fulfil my needs but I still miss the full Alert message. There is a field CppmAlert.Alerts but it is always empty. I can already retrieve the error code and the corresponding details but it is not the full alert message like the screenshot below :

    Is it intended or am I missing something ? I also know that I can retrieve it with the Session template but it doesn't contain other fields I need like the SSID if it is a wireless RADIUS request.

    The last option is to use SQL but I want to know if it could be done with the templates before jumping in this rabbit hole. 

    Thanks in advance !