Event Viewer

If an attempt is made to access the ClearPass Policy Manager administration command-line interface (CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.)  with unsupported SSH Secure Shell. SSH is a network protocol that provides secure access to a remote device. protocol versions, or unsupported encryption or cryptographic hash algorithms, Policy Manager logs those alerts in the Event Viewer. This feature requires the Ingress Event Engine option and services to be enabled (for details, see Enabling Ingress Events Processing).

If an attempt is made to access ClearPass Policy Manager administration WebUI with unsupported SSL Secure Sockets Layer. SSL is a computer networking protocol for securing connections between network application clients and servers over the Internet. protocol versions, or unsupported ciphers, Policy Manager logs those alerts in the Event Viewer. This feature requires the Ingress Event Engine option and services to be enabled for the Policy Manager server (for details, see Enabling Ingress Events Processing).

To access the Event Viewer:

1. Navigate to Monitoring > Event Viewer. The Event Viewer page opens.

Figure 1  Event Viewer Page

The following table describes the Event Viewer parameters:

Table 1: Event Viewer Page Parameters

Parameter	Description
Source	Displays the source of the event. For example, OnGuard, Policy Manager UI or Policy Manager Firmware Update Checker.
Level	Displays the level of the event from the following options: INFO WARN ERROR
Category	Displays the category of the event. For example, Message, Logged in, System, or AV/AS Updates.
Action	Displays the status of the event action. For example, Success, Failed, Unknown, or None.
Timestamp	Displays the date and time when the event occurred.

1. In the Filter field, select Source as the filter parameter.

2. Click Go. Policy Manager returns all event records.

To create an Event Viewer report using custom values:

1. Click the icon. A new filter is added. You can add up to four filters.

Figure 2  Adding an Event Viewer Filter

2. In the Filter field, select the element on which you wish to filter:

Source

Level

Category

Action

Description

3. Specify equals or contains.

4. In the text field, enter the type of event for which you are searching.

5. (Optional) Create up to three additional filters if needed.

6. (Optional) Change the Show records value as desired.

7. Click Go. The following figure displays the Event Viewer report with custom values:

Figure 3  Event Viewer Report with Customized Filter

To display the System Event Details page, click a row in the Event Viewer page.

Figure 4  System Event Details Page