Sending authentication logs to syslog server

[l.buschi]

Hello,

I have a WLAN with web authentication.

I would like to send authentication message to a syslog server when a user authenticate.

I configured a syslog server but it receives all messages from the wlc. I'd like to send to that syslog server only the following:

User test logged in. Client MAC:68:a3:c4:fb:50:49, Client IP:10.0.228.23, AP MAC:2c:31:24:bf:a4:a0, AP Name:AP2C31.24BE.4E18

Is it possible?

Tks.

Johnny

[Ric Beeching]

Hi Jonny,

You can't set a specific syslog level for those messages and it is pretty hard to filter it at the WLC. It would be easier to filter at the syslog server itself by sending all logs to one file for example and then forwarding the logs that contain your user login information to a separate file. There are other methods available such as filtering logs as they come through live (dropping ones that don't match your filter) but that requires some more complex configuring on the syslog side (easy for any unix admins I think!).

Cheers,

Ric