NAC Guest Server syslog correlation

Unanswered Question
Aug 25th, 2009
User Badges:

Hi all.


I have a question regarding the syslog correlation on the Guest Server. I use a Fortigate 310B as radius client which is sending its syslogs to the Guest Server. But when I know look in the Access Reports there's nothing displayed. Does anyone know what is missing?


regards,

Marco

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Lucien Avramov Thu, 08/27/2009 - 23:44
User Badges:
  • Red, 2250 points or more

SSH on the CLI of guest server then:


ls -la /guest/syslog


Check the syslog file to see if it's received

Also check that the syslog service is started, if not start it.

service logprocd status

service logprocd start

blaesingmarco Mon, 08/31/2009 - 00:54
User Badges:

Hello and thanks for the relpy.


The syslog file is received and the service is started. Additionally the following error is logged in the radius.log file:


Tue Aug 25 06:27:26 2009 : Error: [sql] Couldn't update SQL accounting START record - ERROR: invalid input syntax for type inet: ""


Tue Aug 25 07:01:04 2009 : Error: [sql] Couldn't update SQL accounting STOP record - ERROR: invalid input syntax for type inet: ""


Actions

This Discussion