I am trying to get some syslog information from our WLC server into ArcSight Logger. I have setup a connector and am getting information across but it is not what I am after. I need to log when a client connects and disconnects from an access point, specifically;
Client Information ie, IP address, and/or MAC Date/time and duration of the session Which AP was used in the auth and de-auth
I guess my question is, Is this actually possible? and if so, how do I do it.
I have tried changing the syslog facility and the syslog level in the Management>Logs>Config menu but can't seem to narrow down the solution.