Developer

 View Only

  • 1.  Extracting username from REST API list events V2 on Aruba Central.

    Posted Nov 06, 2024 02:41 PM

    Hi everyone

    I'm using the API to retrieve log events from Aruba Central using V2 of the REST API list events.  Using V1 doesn't improve the situation.  Whenever I see on onboarding failure I get a "username" tag in the events_details field of the reply.  However - any successful onboarding does not have any username logged at all.  There is also an authentication event which lists a user, but always uses the IP number and not the username.

    We're using radius as our authenticator.

    Have I missed something obvious or is this how its supposed to be?

    "User 10.240.27.70 with MAC ma:de:up:ma:c0 was authenticated and the role assigned was eduroam"

    Cheers

    Jon



  • 2.  RE: Extracting username from REST API list events V2 on Aruba Central.

    Posted Nov 07, 2024 11:10 AM

    The technical explanation behind this is that authentication (username) is a separate event on the AP/switch/gateway, which opens the access to the network, from the DHCP/user sending traffic which is the first moment that an IP address is available. Central would need to link these events together and create a new event to get what you would like to see, or if you are capturing the logs anyway, you can do it yourself. Many logs in Central are direct from the network devices.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: Extracting username from REST API list events V2 on Aruba Central.

    Posted Nov 08, 2024 09:43 AM

    You can use streaming API, if you have advanced subscription, and you will get username in MONITORING events. Use "STATE_WIRELESSCLIENT" or/and "STATE_WIREDCLIENT" messages to get data about clients.

    There is a sample wsclient_public on Aruba github that will decode streaming data.

    Best, Gorazd



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2024
    ------------------------------



  • 4.  RE: Extracting username from REST API list events V2 on Aruba Central.

    Posted Nov 08, 2024 05:55 PM
    Or use the pycentral modules to get that information: https://github.com/aruba/pycentral/blob/master/pycentral/audit_logs.py

    ---------------------------------
    Daniel Ruiz
    -----------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support.
    Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC.
    ---------------------------------



    Original Message


Related Content