We have standard user logging setup which shows authentication failures via process authmgr, as seen like this:
Oct 12 12:54:17 :522275: <ERRS> |authmgr| User Authentication failed. username=host/CPU014012.company.com userip=0.0.0.0 usermac=b4:b6:76:ff:ff:ff authmethod=802.1x servername=site-nps-02 serverip=10.10.10.10 apname=SITE17-WAP-1 bssid=40:e3:d6:ff:ff:ff
Is there any way to do the same for authentication successes? We're only looking to do so to capture the information "username=host/CPU014012.company.com"