How to get syslog message on rogue detection?

[markus.schwaiger]

Hi there,

is there any way to get a syslog message from a WLC 55XX when a rogue is detected?

I don't want to contain them but I want to use this information in a SIEM.

Thanks,

Markus

[Milos Megis]

Hi,
I am not sure if it is what you want, but try following:
Login via GUI to WLC
Go to MANAGEMENT tab
SNMP
Trap Controls
Security tab
And in section Rogues check "Rogue AP".

I expect that you have properly configured syslog server.

[alois.heilmaier]

Have you tried Milos advice ?
I have this problem too.
Unfortunately WLC uses snmp traps as something like a "message bus.
Any further suggestions to get syslog messages from the WLC ?