<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Ruckus vsz Syslog and User-ID Agent in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/ruckus-vsz-syslog-and-user-id-agent/m-p/1253742#M126391</link>
    <description>&lt;DIV data-testid="markdown-response"&gt;
&lt;DIV&gt;
&lt;P&gt;&lt;SPAN&gt;Hello community, this topic has been on my mind as well. I already searched the forums, but unfortunately I couldn’t quite make sense of it. Which setting do I need to configure on a VSZ 7.1.1.0.872 for the syslog server? Take a look at the image, please!&lt;/SPAN&gt;&lt;/P&gt;
&lt;/DIV&gt;
&lt;/DIV&gt;
&lt;DIV data-testid="markdown-response"&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;/DIV&gt;
&lt;DIV data-testid="markdown-response"&gt;
&lt;DIV&gt;
&lt;P&gt;&lt;SPAN&gt;Or rather: will I then see these entries in the syslog that ends up on the Palo User-ID Agent machine in plain text? I tried a test via the Graylog server, but I don’t see these entries there.:&lt;BR /&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;2026/05/08 08:09:36 &lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;204&lt;BR /&gt;Client disconnected&lt;BR /&gt;Informational&lt;BR /&gt;Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] disconnected from WLAN [HF-LAN] on AP [AP05@70:CA:97:08:50:60] on [b/g/n] with RSSI [42].&lt;BR /&gt;2026/05/08 08:09:16&lt;BR /&gt;236&lt;BR /&gt;Client Information updated&lt;BR /&gt;Informational&lt;BR /&gt;Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] IP address was updated/renewed on WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60].&lt;BR /&gt;2026/05/08 08:09:16&lt;BR /&gt;206&lt;BR /&gt;Client authorization successfully&lt;BR /&gt;Informational&lt;BR /&gt;Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] of WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60] was authorized.&lt;BR /&gt;2026/05/08 08:09:16&lt;BR /&gt;202&lt;BR /&gt;Client joined&lt;BR /&gt;Informational&lt;BR /&gt;Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] joined WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60] on [b/g/n].&lt;/SPAN&gt;&lt;/P&gt;
&lt;TABLE id="Rks-module-base-GridView-3044-record-2098" class="x-grid-item" cellspacing="0" cellpadding="0" data-recordindex="7" data-recordid="2098" data-boundview="Rks-module-base-GridView-3044"&gt;
&lt;TBODY&gt;
&lt;TR class="x-grid-row"&gt;
&lt;TD class="x-grid-cell x-grid-td x-grid-cell-Rks-module-base-TimestampColumn-3038 x-grid-cell-first" data-columnid="Rks-module-base-TimestampColumn-3038"&gt;&amp;nbsp;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;Why?&lt;/SPAN&gt;&lt;/P&gt;
&lt;/DIV&gt;
&lt;/DIV&gt;
&lt;DIV data-testid="markdown-response"&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;/DIV&gt;
&lt;DIV data-testid="markdown-response"&gt;
&lt;DIV&gt;
&lt;P&gt;&lt;SPAN&gt;I hope you still have some ideas or possible solutions for me.&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2026-05-11_08-41-10.jpg" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/71381i32E75B9DB9A65202/image-size/medium?v=v2&amp;amp;px=400" role="button" title="2026-05-11_08-41-10.jpg" alt="2026-05-11_08-41-10.jpg" /&gt;&lt;/span&gt;
&lt;P&gt; Thanks in adavance.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;cu&lt;/P&gt;
&lt;P&gt;Wolfgang&lt;/P&gt;
&lt;/DIV&gt;
&lt;/DIV&gt;</description>
    <pubDate>Mon, 11 May 2026 07:06:05 GMT</pubDate>
    <dc:creator>w.naderer</dc:creator>
    <dc:date>2026-05-11T07:06:05Z</dc:date>
    <item>
      <title>Ruckus vsz Syslog and User-ID Agent</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/ruckus-vsz-syslog-and-user-id-agent/m-p/1253742#M126391</link>
      <description>&lt;DIV data-testid="markdown-response"&gt;
&lt;DIV&gt;
&lt;P&gt;&lt;SPAN&gt;Hello community, this topic has been on my mind as well. I already searched the forums, but unfortunately I couldn’t quite make sense of it. Which setting do I need to configure on a VSZ 7.1.1.0.872 for the syslog server? Take a look at the image, please!&lt;/SPAN&gt;&lt;/P&gt;
&lt;/DIV&gt;
&lt;/DIV&gt;
&lt;DIV data-testid="markdown-response"&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;/DIV&gt;
&lt;DIV data-testid="markdown-response"&gt;
&lt;DIV&gt;
&lt;P&gt;&lt;SPAN&gt;Or rather: will I then see these entries in the syslog that ends up on the Palo User-ID Agent machine in plain text? I tried a test via the Graylog server, but I don’t see these entries there.:&lt;BR /&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;2026/05/08 08:09:36 &lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;204&lt;BR /&gt;Client disconnected&lt;BR /&gt;Informational&lt;BR /&gt;Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] disconnected from WLAN [HF-LAN] on AP [AP05@70:CA:97:08:50:60] on [b/g/n] with RSSI [42].&lt;BR /&gt;2026/05/08 08:09:16&lt;BR /&gt;236&lt;BR /&gt;Client Information updated&lt;BR /&gt;Informational&lt;BR /&gt;Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] IP address was updated/renewed on WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60].&lt;BR /&gt;2026/05/08 08:09:16&lt;BR /&gt;206&lt;BR /&gt;Client authorization successfully&lt;BR /&gt;Informational&lt;BR /&gt;Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] of WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60] was authorized.&lt;BR /&gt;2026/05/08 08:09:16&lt;BR /&gt;202&lt;BR /&gt;Client joined&lt;BR /&gt;Informational&lt;BR /&gt;Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] joined WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60] on [b/g/n].&lt;/SPAN&gt;&lt;/P&gt;
&lt;TABLE id="Rks-module-base-GridView-3044-record-2098" class="x-grid-item" cellspacing="0" cellpadding="0" data-recordindex="7" data-recordid="2098" data-boundview="Rks-module-base-GridView-3044"&gt;
&lt;TBODY&gt;
&lt;TR class="x-grid-row"&gt;
&lt;TD class="x-grid-cell x-grid-td x-grid-cell-Rks-module-base-TimestampColumn-3038 x-grid-cell-first" data-columnid="Rks-module-base-TimestampColumn-3038"&gt;&amp;nbsp;&lt;/TD&gt;
&lt;/TR&gt;
&lt;/TBODY&gt;
&lt;/TABLE&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;BR /&gt;&lt;BR /&gt;Why?&lt;/SPAN&gt;&lt;/P&gt;
&lt;/DIV&gt;
&lt;/DIV&gt;
&lt;DIV data-testid="markdown-response"&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;/DIV&gt;
&lt;DIV data-testid="markdown-response"&gt;
&lt;DIV&gt;
&lt;P&gt;&lt;SPAN&gt;I hope you still have some ideas or possible solutions for me.&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="2026-05-11_08-41-10.jpg" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/71381i32E75B9DB9A65202/image-size/medium?v=v2&amp;amp;px=400" role="button" title="2026-05-11_08-41-10.jpg" alt="2026-05-11_08-41-10.jpg" /&gt;&lt;/span&gt;
&lt;P&gt; Thanks in adavance.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;cu&lt;/P&gt;
&lt;P&gt;Wolfgang&lt;/P&gt;
&lt;/DIV&gt;
&lt;/DIV&gt;</description>
      <pubDate>Mon, 11 May 2026 07:06:05 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/ruckus-vsz-syslog-and-user-id-agent/m-p/1253742#M126391</guid>
      <dc:creator>w.naderer</dc:creator>
      <dc:date>2026-05-11T07:06:05Z</dc:date>
    </item>
    <item>
      <title>Betreff: Ruckus vsz Syslog and User-ID Agent</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/ruckus-vsz-syslog-and-user-id-agent/m-p/1253756#M126394</link>
      <description>&lt;P&gt;I want to use this information for my Palo Alto User-ID Agent - AD-User and Client IP-Address.&lt;BR /&gt;I think the way is about regex....&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thank you!!!!&lt;/P&gt;</description>
      <pubDate>Mon, 11 May 2026 12:14:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/ruckus-vsz-syslog-and-user-id-agent/m-p/1253756#M126394</guid>
      <dc:creator>w.naderer</dc:creator>
      <dc:date>2026-05-11T12:14:58Z</dc:date>
    </item>
  </channel>
</rss>

