Ruckus vsz Syslog and User-ID Agent

w.naderer — Mon, 11 May 2026 07:06:05 GMT

Hello community, this topic has been on my mind as well. I already searched the forums, but unfortunately I couldn’t quite make sense of it. Which setting do I need to configure on a VSZ 7.1.1.0.872 for the syslog server? Take a look at the image, please!

Or rather: will I then see these entries in the syslog that ends up on the Palo User-ID Agent machine in plain text? I tried a test via the Graylog server, but I don’t see these entries there.:

2026/05/08 08:09:36

204
Client disconnected
Informational
Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] disconnected from WLAN [HF-LAN] on AP [AP05@70:CA:97:08:50:60] on [b/g/n] with RSSI [42].
2026/05/08 08:09:16
236
Client Information updated
Informational
Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] IP address was updated/renewed on WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60].
2026/05/08 08:09:16
206
Client authorization successfully
Informational
Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] of WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60] was authorized.
2026/05/08 08:09:16
202
Client joined
Informational
Client [Domain\wolf@10.0.0.62@38:7A:0E:D4:92:9D] joined WLAN [HF-LAN] from AP [AP05@70:CA:97:08:50:60] on [b/g/n].

Why?

I hope you still have some ideas or possible solutions for me.

Thanks in adavance.

Wolfgang

Betreff: Ruckus vsz Syslog and User-ID Agent

w.naderer — Mon, 11 May 2026 12:14:58 GMT

I want to use this information for my Palo Alto User-ID Agent - AD-User and Client IP-Address.
I think the way is about regex....

Thank you!!!!

Re: Ruckus vsz Syslog and User-ID Agent

BPry — Wed, 13 May 2026 19:19:22 GMT

@w.naderer,

I would focus on getting your syslog events setup on Graylog so that you can both actually see the association events that you're going to need and then work on the required regex a bit easier. Filtering out those client association events is likely not what you want to do however.

topic Re: Ruckus vsz Syslog and User-ID Agent in General Topics

Ruckus vsz Syslog and User-ID Agent

Betreff: Ruckus vsz Syslog and User-ID Agent

Re: Ruckus vsz Syslog and User-ID Agent