Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass Guest application logs into external server

This thread has been viewed 1 times

  • 1.  Clearpass Guest application logs into external server

    Posted Mar 23, 2017 01:45 PM

    Hi,

     

    I do have syslog targets in CPPM, the problem is I dont know how to define export filter that will export application logs from clearpass guest.

     

    Specifically I need info about new user accounts with all details that applications logs have but are limited to 15 days on aruba itself.



  • 2.  RE: Clearpass Guest application logs into external server

    EMPLOYEE
    Posted Mar 23, 2017 01:48 PM
    There is an active feature enhancement request for this, but it is not committed to a release yet.


  • 3.  RE: Clearpass Guest application logs into external server

    Posted Mar 23, 2017 02:06 PM

    So there is no way to gather logs about newely created accounts into external server as of today?



  • 4.  RE: Clearpass Guest application logs into external server

    EMPLOYEE
    Posted Mar 23, 2017 02:16 PM

    You will get all audit record logs that appear in Policy Manager Audit Viewer via syslog by using the "Audit Records" export template.

     

    Guest account creation and changes appear in that log. You just won’t see the raw log data that you get in “Application Log” on the guest side.

     

    audit-viewer_guest-account.png

     

    syslog_audit-filter.png

     



  • 5.  RE: Clearpass Guest application logs into external server

    Posted Mar 23, 2017 03:01 PM

    The problem is that logs does not contain what you see in Audit viewer

     

    It looks like that

     

    March 23rd 2017, 14:55:14.248    <143>2017-03-23 14:55:14,245 x.x.x.x audit 1 1 0 Timestamp=Mar 23 2017 14:54:14.227 EDT,EntityName=m@m.com,Category=Guest User,Action=ADD,User=mabc



  • 6.  RE: Clearpass Guest application logs into external server

    EMPLOYEE
    Posted Mar 23, 2017 03:05 PM
    What information are you looking for that’s not provided?


  • 7.  RE: Clearpass Guest application logs into external server

    EMPLOYEE
    Posted Mar 23, 2017 03:05 PM
    What information are you looking for that’s not provided?


  • 8.  RE: Clearpass Guest application logs into external server

    Posted Mar 23, 2017 03:11 PM

    All attribiutes you see there



  • 9.  RE: Clearpass Guest application logs into external server

    EMPLOYEE
    Posted Mar 23, 2017 03:34 PM

    You won't get that via syslog.



  • 10.  RE: Clearpass Guest application logs into external server

    Posted Mar 27, 2017 01:18 PM

    Will application logs from clearpass guest feature send logs as they look now in that place?



  • 11.  RE: Clearpass Guest application logs into external server

    EMPLOYEE
    Posted Mar 23, 2017 01:48 PM
    There is an active feature enhancement request for this, but it is not committed to a release yet.