Security

last person joined: 9 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).

Clearpass - Audit Log Filter to Syslog

This thread has been viewed 2 times
  • 1.  Clearpass - Audit Log Filter to Syslog

    Posted Jan 31, 2019 10:37 AM

    Currently have Clearpass sending logs out to an external syslog server.  It's sending audit log entries over which was fine until MDM was integrated.  The logs are sending thousands of messages which are only updating the "last check-in" MDM information in the endpoint database.  Looking to filter out these endpoint modify messages so they don't get sent to syslog, though I don't see any option to do so.  Is there a way to limit these endpoint modify entries?