Searching an AP's auth history
02-14-2018 06:28 AM
Ok, I *must* be missing something, but I have a need to look at an AP and see who has authenticated to that AP back through time. I *know* the data is in there. I can see AP information tied to past authentications in both Clearpass and in Airwave, but Clearpass won't let me filter by any of the possible AP fields, and Airwave won't show me anything other thancurrent data when looking into AP details. The Controllers, I expect that from, but not Airwave/Clearpass.
On top of that, even the logging options from clearpass don't default include AP info, and trying to get it added seems spotty at best... so exporting to Splunk isn't even helping.
Anyone have any tips for me? Thanks!