cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Event Log Export for event types and specific details

New here

Event Log Export for event types and specific details

I would to be able to export particular users VPN Connection and disconnections.  I can identify this person through their IP address, but I cannot filter by it because Meraki could not find that client.  I also see the user by ID, but cannot filter by details.  Also, when exporting, it only exports the records on the screen.  I need to go back the full 30 days.  If I could at least get that, I could filter for the data I need.

2 REPLIES 2
Here to help

Re: Event Log Export for event types and specific details

If you are using Meraki authentication for VPN clients, you can setup your MX to send to a SYSLog server, the client VPN login and disconnect are written to syslog although merakis knowledge base does not note it.

 

Sep 05 14:37:55 logger: <134>1 1504640275.576589582 MX_Data_appliance events client_vpn_connect user id 'mbrad@company1.com' local ip 10.55.100.37 connected from 170.25.133.208
Sep 05 16:12:05 logger: <134>1 1504645925.365386977 MX_Data_appliance events client_vpn_disconnect user id 'mbrad@company1.com' local ip 10.55.100.37 connected from 170.25.133.208

 

 

https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Event_Types...

 

Getting noticed

Re: Event Log Export for event types and specific details

this is silly. if meraki has the data, it must be possible to export/download it.

 

"download as", as it is, is almost useless.

 

should be very simple to implement downloading a filtered timerange.

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.