topic Re: Log/data dictionary in Unleashed

Log/data dictionary

simon_lee_86rok — Sun, 21 Mar 2021 23:41:20 GMT

Hi everyone,

Our SIEM team is having trouble interpreting the logs that are sent from our Ruckus Unleashed APs. Does anyone know/have a data dictionary that explains the log format, fields and other information captured?

Thanks!

Re: Log/data dictionary

syamantakomer — Mon, 22 Mar 2021 14:52:15 GMT

Hi Simon,

Are you talking about syslogs?

No, there is no dictionary for log interpretation.

Are you looking for some specific information? Because AP modules will have so many different logs and not everything can be explained or required by end server.

Re: Log/data dictionary

simon_lee_86rok — Mon, 22 Mar 2021 15:04:18 GMT

Hi Syamantak,

Yes, I'm referring to the syslogs. At the moment we're not sure what we're looking for since we don't know what the logs show at the moment.

But things like the following would be helpful:

rogue AP detection events
users connecting to wireless networks
firmware updates

But we may have other needs once we get an idea of what the logs are capable of showing.

Re: Log/data dictionary

syamantakomer — Mon, 22 Mar 2021 15:13:24 GMT

Hi Simon,

For our other controller based products like ZD and SZ, we do have syslog referance guide, but not for Unleashed. However, ZD and Unleashed has similar software.

Please refer below syslog guide which is for ZD, most of the logs are relevant with Unleashed.

https://support.ruckuswireless.com/documents/3387-zonedirector-10-4-1-ga-syslog-event-message-reference-guide/download

Re: Log/data dictionary

simon_lee_86rok — Mon, 22 Mar 2021 23:56:51 GMT

Thank you Syamantak, that certainly puts us in a better position than before.