FreeRADIUS 1.1.3 syslog and radacct question

2011-09-29 Thread Tremaine Lea
I have a requirement to get successful and failed radius authentication logs from FreeRADIUS to a SIEM for audit purposes. I have updated the config to log to syslog, but I need more information than is currently appearing. Example: Sep 29 10:40:56 radiusserver radiusd[13806]: Login incorrect:

Re: FreeRADIUS 1.1.3 syslog and radacct question

2011-09-29 Thread Arran Cudbard-Bell
On 29 Sep 2011, at 18:51, Tremaine Lea wrote: I have a requirement to get successful and failed radius authentication logs from FreeRADIUS to a SIEM for audit purposes. I have updated the config to log to syslog, but I need more information than is currently appearing. Example: Sep 29

Re: FreeRADIUS 1.1.3 syslog and radacct question

2011-09-29 Thread Tremaine Lea
Yeah, doing things a bit backwards. I'll be looking to upgrade to 2.1.1 as soon as reasonable. I'm hoping that's sooner rather than later. It appears in the short term I can read the radacct log files into the SIEM by parsing the entries into discrete fields. Kind of sub-optimal, but it'll get