Client VPN Reporting

[Frankthetank]

So with the recent event's with covid-19, my company is having more and more employees work from home using the client VPN connection, I am needing to generate a weekly report on who connects, when they connect and disconnect, and it would also be nice to see how long they were connected overall each day. I know I can go and check the logs to see the VPN activity but doing this manually is pretty tedious. I want to know if it is possible to create a script or if there are some that are already created that will do what I am looking for or if there is a piece of software that will parse the logs and generate a report for me, any input is greatly appreciated!

[JimmyPhelan]

Hi Frank

I would not depend on the Meraki Dashboard for this information, i would instead look to setup a syslog server that you could more easily interrogate on an automated basis. It will very likely be easier to interrogate, and potentially a lot of syslog interrogators out there have the query ready for you.

That being said, the following https://api.meraki.com/api_docs/v0#list-the-clients-that-have-used-this-network-in-the-timespan could be used as a starting point.

[andy0609]

You can use the API to get this type of info. Also, you can get a 30 day trial of manage engine firewall analyzer and send the logs there, very useful!

[Julian]

Hi, you can send the logs of the mx to a syslog server, and analyze it, is easy to find the client connection up and down. you can install it on premise ( https://www.graylog.org/products/open-source or one linux with syslog-ng) or you can use a cloud syslog server like https://papertrailapp.com/ , https://www.splunk.com/ or similar

Regards

[NolanHerring]

Just saw this other thread, does this help?

https://community.meraki.com/t5/Security-SD-WAN/Client-VPN-Feature-Request/m-p/80311