Wireless Client View

Client IP, MAC, Username, or SSID * Last 15 minutes

sourcetype="Cisco-WLC" AuthEvent $usrn$ | table _time Username IPAddress ClientMAC APName SSID | head 1 | rename IPAddress as "Client IP Address" ClientMAC as "Client MAC Address" APName as "Associated Access Point" celltruefalsenonecell10 sourcetype="Cisco-WLC" AuthEvent $usrn$ SSID!="NULL" | timechart dc(ClientMAC) by SSID column Time Count ellipsisNone 0 visible visible visible linear linear false inherit 50 10 area gaps 0.01 default shiny all 0 ellipsisMiddle right sourcetype="Cisco-WLC" AuthEvent $usrn$ | dedup ClientMAC | stats count radialGauge [0,10000,20000,30000] ellipsisNone 0 visible visible visible linear linear false inherit 50 10 area gaps 0.01 default shiny all 0 ellipsisMiddle right sourcetype="Cisco-WLC" AuthEvent (SSID=IVYGuest OR SSID=IVYStudent) $usrn$ | dedup ClientMAC | stats count ellipsisNone 0 visible visible visible linear linear false inherit radialGauge 50 10 area gaps [0,10000,20000,30000] 0.01 default shiny all 0 ellipsisMiddle right sourcetype="Cisco-WLC" AuthEvent SSID=IVYStudent $usrn$ | dedup ClientMAC | stats count ellipsisNone 0 visible visible visible linear linear false inherit radialGauge 50 10 area gaps [0,10000,20000,30000] 0.01 default shiny all 0 ellipsisMiddle right sourcetype="Cisco-WLC" AuthEvent SSID=IVYGuest $usrn$ | dedup ClientMAC | stats count ellipsisNone 0 visible visible visible linear linear false inherit radialGauge 50 10 area gaps [0,10000,20000,30000] 0.01 default shiny all 0 ellipsisMiddle right sourcetype="Cisco-WLC" AuthEvent SSID=IVYStaff $usrn$ | dedup ClientMAC | stats count ellipsisNone 0 visible visible visible linear linear false inherit radialGauge 50 10 area gaps [0,10000,20000,30000] 0.01 default shiny all 0 ellipsisMiddle right sourcetype="Cisco-WLC" AuthEvent $usrn$ | dedup IPAddress | table Username IPAddress ClientMAC APName SSID _time | rename IPAddress as "Client IP Address" ClientMAC as "Client MAC Address" APName as "Associated Access Point" 25truefalsenonecell