Hello,
I have a problem with my Kiwi Syslog server and syslog messages received from my Aruba ClearPass Server. So I get the messages, no problem with that, but they are truncated. I mean, I don't get the full syslog message.
Here is an example : 10-09-2013 11:52:18 Local1.Debug 1.1.1.1 2013-10-09 10:48:42,270 1.1.0.1 Guest Access 66 1 0 RADIUS.Auth-Method=PAP,RADIUS.Auth-Source=Local:localhost,
Normally, here are all the information sent by Aruba ClearPass (and that should be present into the message) :
RADIUS.Acct-Authentic
RADIUS.Acct-Called-Station-Id
RADIUS.Acct-Calling-Station-Id
RADIUS.Acct-Delay-Time
RADIUS.Acct-Framed-IP-Address
RADIUS.Acct-Input-Octets
RADIUS.Acct-Input-Pkts
RADIUS.Acct-NAS-IP-Address
RADIUS.Acct-NAS-Port
RADIUS.Acct-NAS-Port-Type
RADIUS.Acct-Output-Octets
RADIUS.Acct-Output-Pkts
RADIUS.Acct-Service-Name
RADIUS.Acct-Session-Id
RADIUS.Acct-Session-Time
RADIUS.Acct-Status-Type
RADIUS.Acct-Termination-Cause
RADIUS.Acct-Timestamp
RADIUS.Acct-Username
RADIUS.Auth-Method
RADIUS.Auth-Source
As you can see, there are only the last 2 parameters which I can see on Kiwi Syslog. Is there something to setup in Kiwi ?
Thanks for you help.
Dimitri