Overview

You One can specify a syslog Syslog server for sending syslog Syslog messages to the external servers by using the WebUI or the CLI in Aruba Controller.

Ref. link: Configuring a Syslog Server in the Aruba Controller.

Steps Of Configuration

In the Old WebUI

...

4. In the Syslog server text box which is in the Servers section, enter the IP address of the server to which you want to send system logs.
5. Select the required values to configure syslog facility levels. Syslog Facility is an information field associated with a syslog message. It is an application or operating system component that generates a log message. The following seven facilities are supported by Syslog:
>>Ap-Debug—Detailed log about the Instant AP device.

>>Network—Log about the change of network; for example, when a new Instant AP is added to a network.

>>Security—Log about network security; for example, when a client connects using the wrong password.

>>System—Log about configuration and system status.

>>User—Important logs about the client.

>>User-Debug—Detailed logs about client debugging.

...

>>Information-Messages of general interest to system users.

>>Debug-Messages containing information useful for debugging
6.Click OK

In the New WebUI

To configure a Syslog server and Syslog facility levels:

...

1. Go to Configuration > System.

2.Click Show advanced options.
3. Expand Monitoring.

...

user-debug warn

wireless error
Logging LevelLogg

VERIFICATION OF CONFIGURATION

Verification can be done either from CCE Server or from UI.

Using UI

STEP 1: Log in to UI >> SYSTEM

...

STEP 2: >> LOGS AND FLOWS COLLECTION STATUS .

...

STEP 3: >>Inside SOURCE DEVICE IP, IP will reflect.

...

Using CCE SERVER

“sudo tcpdump -i any host 514 and host <IP address> -AAA” command should be ran on CCE server to check whether or not we are getting logs .

LVerVogginVvelLogg