Users Guide

170 | Monitoring Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
About the Event Viewer
The Event Viewer page provides reports about system-level events. All attempted upgrade, patch, and hotfix
installations are logged in the Event Viewer, including failed system installation attempts.
Session Idle time-out values for Admin WebUI session time-out and CLI session time-out events generate Event
Viewer messages with a description that includes the client IP address and session ID when necessary.
Unsupported Admin Access Attempts Logged to the Event Viewer
If an attempt is made to access W-ClearPass Policy Manager administration command-line interface (CLI) with
unsupported SSH protocol versions, or unsupported encryption or cryptographic hash algorithms, W-ClearPass
logs those alerts in the Event Viewer. This feature requires the Ingress Event Engine option and services to
be enabled (for details, see Enabling Ingress Events Processing on page 736).
If an attempt is made to access W-ClearPass Policy Manager administration WebUI with unsupported SSL
protocol versions, or unsupported ciphers, W-ClearPass logs those alerts in the Event Viewer. This feature
requires the Ingress Event Engine option and services to be enabled for the W-ClearPass server (for details,
see Enable Ingress Events Processing on page 500).
To access the Event Viewer:
1. Navigate to Monitoring > Event Viewer.
The Event Viewer page opens.
Figure 134: Event Viewer Page
The following table describes the Event Viewer parameters:
Parameter Description
Source Displays the source of the event. For example, AdminUI or W-ClearPass Updater.
Level Displays the level of the event from the following options:
l INFO
l WARN
l ERROR
Category Displays the category of the event. For example, Logged in, System, or AV/AS Updates.
Table 72: Event Viewer Page Parameters