Hello,
I have a question regarding the syslog format which the Aruba instant OS sends. Below a sample:
11-28-2014 09:18:46 Local1.Notice 10.54.1.33 Nov 28 08:18:45 2014 10.54.1.33 stm[1515]: <501199> <NOTI> <10.54.1.33 24:DE:C6:C4:EE:72> User authenticated, mac-34:e2:fd:65:83:74, username-jbrouwer@pj.nl, IP-10.244.0.14, method-4, role-Educatie
Is it possible to change the format so the , sign can be removed from the log? I am trying to configure a Palo Alto user ID agent as a sysloglistener for user to IP mapping but it sees the IP format with the , behind the IP as an invalid IP address.
Regards,
Joost Brouwer