Event Log Export for event types and specific details

pcavanaugh
New here

Event Log Export for event types and specific details

I would to be able to export particular users VPN Connection and disconnections.  I can identify this person through their IP address, but I cannot filter by it because Meraki could not find that client.  I also see the user by ID, but cannot filter by details.  Also, when exporting, it only exports the records on the screen.  I need to go back the full 30 days.  If I could at least get that, I could filter for the data I need.

2 Replies 2
G_ControlScan
Here to help

If you are using Meraki authentication for VPN clients, you can setup your MX to send to a SYSLog server, the client VPN login and disconnect are written to syslog although merakis knowledge base does not note it.

 

Sep 05 14:37:55 logger: <134>1 1504640275.576589582 MX_Data_appliance events client_vpn_connect user id 'mbrad@company1.com' local ip 10.55.100.37 connected from 170.25.133.208
Sep 05 16:12:05 logger: <134>1 1504645925.365386977 MX_Data_appliance events client_vpn_disconnect user id 'mbrad@company1.com' local ip 10.55.100.37 connected from 170.25.133.208

 

 

https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Event_Types...

 

nikiwaibel
Getting noticed

this is silly. if meraki has the data, it must be possible to export/download it.

 

"download as", as it is, is almost useless.

 

should be very simple to implement downloading a filtered timerange.

Get notified when there are additional replies to this discussion.