NAC Guest Server syslog correlation

blaesingmarco · ‎08-25-2009

Hi all.

I have a question regarding the syslog correlation on the Guest Server. I use a Fortigate 310B as radius client which is sending its syslogs to the Guest Server. But when I know look in the Access Reports there's nothing displayed. Does anyone know what is missing?

regards,

Marco

Lucien Avramov · ‎08-27-2009

SSH on the CLI of guest server then:

ls -la /guest/syslog

Check the syslog file to see if it's received

Also check that the syslog service is started, if not start it.

service logprocd status

service logprocd start

blaesingmarco · ‎08-31-2009

Hello and thanks for the relpy.

The syslog file is received and the service is started. Additionally the following error is logged in the radius.log file:

Tue Aug 25 06:27:26 2009 : Error: [sql] Couldn't update SQL accounting START record - ERROR: invalid input syntax for type inet: ""

Tue Aug 25 07:01:04 2009 : Error: [sql] Couldn't update SQL accounting STOP record - ERROR: invalid input syntax for type inet: ""