Overview
Aruba ClearPass is a policy management platform that offers a centralized service for managing device and user profiles. As more work is done remotely from a countless number of devices, tracking use and troubleshooting issues has become more challenging.
With Aruba ClearPass, IT teams can write rules for the addition of new devices to the network. The platform also provides constant monitoring, so you will know what devices are being used and where they are connecting from at all times.
When you configure log forwarding from Aruba ClearPass, Blumira will be able to provide log storage and visibility via Report Builder for your compliance needs.
Before you begin
This integration requires a Blumira sensor to be installed before you can complete the steps below. Ensure that you complete the steps in Building a Blumira sensor with Ubuntu before you continue.
Gather the IP address of your Blumira sensor to use when configuring the external service.
To find and copy the IP address of the sensor, do the following:
- In Blumira, navigate to Ingestion > Sensors.
- Click the sensor row to open the details page.
- In the Overview section, next to Host Details, copy the IP address.
Configuring log forwarding from Aruba ClearPass
To start sending logs to Blumira, do the following:
- Navigate to Administration > Server Manager > Log Configuration.
- Navigate to the System Level Parameters tab.
- Under "Syslog Settings," in the "Syslog Server" box, type the IP address of your Blumira sensor.
- For all services listed, click the check box under Enable Syslog, and set each "Syslog Filter Level" to INFO.
- Click Save.
Reference: See more information and images related to this configuration in HPE Aruba Networking's Log Forwarding article.