Aruba ClearPass
See below how to configure Aruba ClearPass to log in Logmanager in a standardized format.
- Log in to ClearPass Policy Manageru.
- Download the template SyslogExportData_logmanager , open the file in any editing tool and edit all occurrences of the IP address here 192.0.2.0/24 to IP addresses of your Logmanager, then save and continue to the next steps.
- Go to Administration ‣ External Servers ‣ Syslog Export Filters.
- In the upper right corner, click on: Import ‣ Choose a file and here you need to select the template that you downloaded and modified in step 2, SyslogExportData_logmanager.xml
- Then click on Import and you can see in Administration ‣ External Servers ‣ Syslog Export Filters all imported templates, then in Administration ‣ External Servers ‣ Syslog Targets you should see IP address of your Logmanager.
-
If not visible any logs in Logmanager under the dashboard Endpoint log, there is need to go to ClearPass Policy Manager, then to Administration ‣ Server Configuration ‣ System and choose Enable Insight.
-
If you do not use TACACS+ to authenticate commands on devices, you can switch the TACACS commands logmanager filter in Administration ‣ External Servers ‣ Syslog Export Filters to disable.