2016-03-10 04:25 AM
Hi,
I had integrated Aruba Networks Mobility Controller and getting the below logs but they are not getting parsed under the right meta key. I had also applied the updated Aruba parser on the Log Decoder. By the default the logs are going under ciscorouter parser then I mapped the IP address of the aruba controller to arubanetworks parser but then the message isn't parsing.
This is the raw log file.
: date=2016-03-10 time=14:40:29 device_id=EliteAC logid=02 protocol=tcp dst_port=80 clientip=192.16.28.222 username=97xxxxxx85 liveip= macaddress=f0:5b:7b:7c:41:5f sitename=media1.popsugar.com url=http://media1.popsugar-as.com
Could someone suggest me how I can get the details of these logs under the right field. Thanks.
Regards,
Deepanshu Sood.
2016-03-14 11:52 PM
If the device type is supported, you may open a support case and RSA support will take care, they will update the parser later.
If not supported, then you have to custom the parser by using ESI tool .