Security

 View Only
last person joined: 7 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

ClearPass Audit row details as email notification thru a syslog server

This thread has been viewed 9 times

  • 1.  ClearPass Audit row details as email notification thru a syslog server

    Posted 19 days ago

    Hello, I am trying to create a syslog export filter that forwards the audit row details  to my syslog server which would forward the information to my email mailing list the same way a Cisco switch SNMP config trap can be forwarded to a SolarWinds NCM instance which sends an email with the before and after configuration difference. Does this require any custom SQL filters? The same way a Cisco switch SNMP config trap can be forwarded to a SolarWinds NCM instance which send an email with the before and after configuration difference. 

    Thanks.

    Filter:
    Name:
    Copy_of_[ClearPass Configuration Audit]
    Description:
    All ClearPass Configuration Audit
    Type:
    Insight
    Template:
    ConfigAudit
    Configuration Type:
    Select Attributes
    Custom SQL:
     
    Rules:
    Rules Evaluation Algorithm:
    MATCHES_ALL
      Conditions  
    1. ( CppmConfigAudit:Action EXISTS )