Examples
This page provides some real world scenarios giving you guidance on how to configure the Log Exporter for your scenario.
Example 1: General authentication information
Scope and assumptions
The scope of the query provided below is as follows:
The admin is interested in understanding which users and/or devices are authenticating (successful or unsuccessful) and to built frequency statistics based on that
No VLAN tagging is used
Only certificate-based authentication is used (no username-password-based authentication)
Target
Log Analytics or General Webhook
Message Filter configuration
Rule Engine
Success
False
Failed
False
Error
False
Authorization System
Requests
False
Success
True
Failed
True
Error
False
Proxy Authentication
Connections
False
Success
False
Failed
False
Error
False
Data Configuration
Example 2: Detailed authentication information
Scope and assumptions
The scope of the query provided below is as follows:
The admin is interested in understanding which users and/or devices are authenticating (successful or unsuccessful)
The OCSP response of the CA if certificates are used
The used Access Point (via MAC address)
The RADIUS Rule that was triggered / VLAN that was tagged
Both, certificate-based authentication and username-password-based authentication are considered
Target
Log Analytics or General Webhook
Message Filter Configuration
Rule Engine
Success
True
Failed
True
Error
False
Authorization System
Requests
False
Success
False
Failed
False
Error
False
Proxy Authentication
Connections
False
Success
False
Failed
False
Error
False
Data configuration
Example 3: General error notifications
Scope and assumptions
The scope of the query provided below is as follows:
The admin is interested in receiving pro-active notifications about errors on the RADIUSaaS platform for the operations team.
Target
Message Filter Configuration
Rule Engine
Success
False
Failed
False
Error
False
Authorization System
Requests
False
Success
False
Failed
False
Error
True
Proxy Authentication
Connections
False
Success
False
Failed
False
Error
True
Data configuration
Last updated