ClearPass provides the capability to send various kinds of Authentication, Authorization and Accounting events as RFC 5424 compliant Syslog messages to any Syslog receiver when endpoints authenticate to the network.
ArcSight Logger is a popular log management/SIEM solution that can receive events (including Syslog messages) from multiple sources, which can then be searched, analyzed and displayed using its graphical user interface.
HP ArcSight SIEM
Tips & Tricks
|This is a native ClearPass integration. Refer to API documentation above for more information.|