arubanetworks parser - message not parsing

[DeepanshuSood1]

Hi,

Few days back I had integrated Aruba Mobility Networks with RSA SA, but the logs are not properly parsing.

I had downloaded the parser from the Log Decoder of aruba and upload the raw logs of aruba in the ESI tool & found that the by default parser is only parsing the header of the logs but not the message.

Refer to the attached screenshot.

Suggest the solution how we can fix this. Thanks.

Regards,

Deepanshu Sood.

[PaulThornton]

Hi Deepanshu,

Is this related to your earlier question Aruba Network Mobility Controller - Parsing Issue​?

Regards

Paul Thornton

RSA Social Engagement Manager

[DeepanshuSood1]

Actually yes, but now the issue get solved.

With the help of my friend, I & him worked on a creating a new parser with the available raw logs and now all the logs are parsing.

But still if I check the by default parser in the log decoder for arubanetworks doesn’t parser the logs (as attached & mentioned in my previous discussion on the community).

Pls do the needful, if possible. Thanksz.

[DavidPoirier]

Hi,

What is the version you are currently using?

Our documentation states these version are supported > ArubaOS 2.5.4.0, 3.4, 6.1.2.2, 6.4

Perhaps we need to incorporate an RFE to have the logs parser enhanced since this is just a syslog push.

David

[DavidPoirier]

Hi Deepanshu,

I was wondering if they are going into another device before SA? like a syslog relay? Is the header the Aruba and not another device?

David