topic Cisco WLC integration with PA - Client logout events from syslog messages in General Topics

Cisco WLC integration with PA - Client logout events from syslog messages

Sunugopal — Wed, 11 Nov 2020 06:13:34 GMT

Good day.

Is there any way to generate user logout events from syslog messages?

Firewall is receiving syslog messages with client disassociate events from WLC.

Tried a syslog Parse Profile with Event String as " Client Disassociated: ", still no luck.

Thank you,

OtakarKlier — Thu, 12 Nov 2020 23:02:57 GMT

Hello,

While I have not configured this in the past, I did find the following article that may help.

Regards,

Sunugopal — Mon, 16 Nov 2020 11:52:52 GMT

Thank you for the document.

I was following the same.

Firewall receives client associate & disassociate messages.

But logout events are not generated when clients are dis associated.

Sunugopal — Tue, 12 Jan 2021 07:32:37 GMT

Update :

issue resolved.

Changed the value of 'Address delimiter' to \s (old value was \z) .

Logout events are generated now.