Aruba Networks WLAN

To successfully receive and process logs, you need to set up the log classification correctly. The easiest way to do this is to add the IP addresses of the device (or your chosen subnet) to the appropriate IP prefix list.

Some devices in Logmanager do not have their own IP Prefix list and you need to create one or use a classifier - Classifiers. However, an IP prefix list exists for this device, so follow the procedure below.

1. Log in to the web administration Logmanager.

   Add the IP address of the Aruba device to the IP prefix list “HP-Aruba”.

   Go to Parser/IP prefix lists:

   • Locate the IP prefix list HP-Aruba.
   • Edit with blue pen icon.
   • Add the IP addresses of your Aruba devices. (Alternatively, you can use your chosen subnet)

   IP prefix lists are used in the vendor-Default-classification template - more Classifier templates.

   This is standard for most Logmanager installations. If you are using your own classifiers or are unsure about something, please contact your certified partner or help@logmanager.com.

2. Login to your Aruba Controller device using SSH and use the following commands to configure the format of syslog messages correctly:

   ssh admin@aruba-controller
   

3. Enable administration mode:

   enable
   

4. Now enter to configuration mode:

   configure terminal
   

5. Enable logging of all messages to Logmanager:

   logging <Logmanager_IP_address>
   

6. Save the configuration by keypress Control-Z or exit command.

7. Save your Aruba controller configuration with write memory command.

Now your Aruba device will be sending logs to Logmanager.

To successfully receive and process logs, you need to set up the log classification correctly. The easiest way to do this is to add the IP addresses of the device (or your chosen subnet) to the appropriate IP prefix list.

Some devices in Logmanager do not have their own IP Prefix list and you need to create one or use a classifier - Classifiers. However, an IP prefix list exists for this device, so follow the procedure below.

1. Log in to the web administration Logmanager.

To successfully receive and process logs, you need to set up the log classification correctly. The easiest way to do this is to add the IP addresses of the device (or your chosen subnet) to the appropriate IP prefix list.

Some devices in Logmanager do not have their own IP Prefix list and you need to create one or use a classifier - Classifiers. However, an IP prefix list exists for this device, so follow the procedure below.

1. Log in to the web administration Logmanager.

   Add the IP address of the Aruba device to the IP prefix list “HP-Aruba”.

   Go to Parser/IP prefix lists:

   • Locate the IP prefix list HP-Aruba.
   • Edit with blue pen icon.
   • Add the IP addresses of your Aruba devices. (Alternatively, you can use your chosen subnet)

   IP prefix lists are used in the vendor-Default-classification template - more Classifier templates.

   This is standard for most Logmanager installations. If you are using your own classifiers or are unsure about something, please contact your certified partner or help@logmanager.com.

2. Login to web administration, you need a username with admin privilege.

   

3. Click on Configuration ‣ MANAGEMENT ‣ Logging.

4. Enable logging of all messages to Logmanager. Click on new button and fill following fields:

   • IP address: set <Logmanager_IP_address>
   • Category: N/A
   • Logging Facility: N/A
   • Severity: N/A

   Logmanager_IP_address is IP address of your Logmanager server.

   

5. Now click on Add button and then click on Apply button to save inserted data.

   

6. Save Aruba Controller configuration by click on Save Configuration button.

Now your Aruba device will be sending logs to Logmanager.

1. Add your Aruba Instant AP to Logmanager Devices: Devices.

   On Add new Device page fill the following form fields:

   • Name: ArubaInstantAP
   • IP: <ArubaInstantAP_IP_address>
   • Type: ArubaOS

2. Login to your Aruba Instant AP device using SSH and use the following commands to configure the format of syslog messages correctly:

   ssh admin@instantap
   

3. Now enter to configuration mode:

   configure terminal
   

4. Enable logging of all messages to Logmanager:

   syslog-server <Logmanager_IP_address>
   

5. To specify the logging level, use syslog-level command with severity option (in this case, we use severity info):

   syslog-level info
   

6. Commit the configuration changes:

   commit apply
   

7. Save the configuration to memory and configuration is now in effect.

   write memory
   

Now your Aruba device will be sending logs to Logmanager.

This procedure demonstrates the GUI configuration for all available syslog messages.

1. Add your Aruba Instant AP to Logmanager Devices: Devices.

   On Add new Device page fill the following form fields:

   • Name: ArubaInstantAP
   • IP: <ArubaInstantAP_IP_address>
   • Type: ArubaOS

2. Login to web administration, you need a username with admin privilege.

   

3. Click on System on the top of page.

   

4. Click on Show advanced options on the bottom of page.

   

   Now click on tab monitoring and fill field:

   • syslog server: <Logmanager_IP_address>
   • and choose Syslog Facility Levels for all categories (level info is recommended)

   Logmanager_IP_address is IP address of your Logmanager server.

   

5. Click on OK button to save your configuration.

Now your Aruba device will be sending logs to Logmanager.

1. In the Managed Network node hierarchy, navigate to the Configuration > System > Logging > Syslog Servers page.
2. To add a logging server, click + in the Syslog Servers section.
3. Add the address of your Logmanager to the list of log servers. Click Apply.
4. To select the types of messages you want to log, select Logging Levels .
5. Select the category or subcategory to be logged.
6. To select the severity level for the category or subcategory, select the level from the Logging Level drop-down list.
7. Select the logging format CEF or BSD-standard from the Format drop-down list.

   The ArcSight CEF is a log management standard that uses a standardized logging format so that data can easily be collected and aggregated for analysis by an enterprise management system.

8. Click Submit.
9. Click Pending Changes.
10. In the Pending Changes window, select the check box and click Deploy changes.