Administrator Guide

Important System Events
This section provides the following information:
l Admin User Interface Events
l Admin Server Events
l Async Service Events
l W-ClearPass/Domain Controller Events
l W-ClearPass System Configuration Events
l W-ClearPass Update Events
l Cluster Events
l Command Line Events
l Database Replication Services Events
l Licensing Events
l Policy Server Events
l RADIUS/TACACS+ Server Events
l Service Names
l SNMPEvents
l Support Shell Events
l System Auxiliary Service Events
l System Monitor Events
This topic describes the important System Events logged by W-ClearPass. These messages are available for
consumption on the administrative interface, and in the form of a syslog stream. The events below are in the
following format
<Source>, <Level>, <Category>, <Message>
Elements listed below within angle brackets (for example, <content>) are variable, and are substituted by
W-ClearPass as applicable (such as an IP address).
For the list of available service names, refer to Service Names on page 800.
Admin User Interface Events
Critical Events
“Admin UI”, “ERROR” “Email Failed”, “Sending email failed”
“Admin UI”, “ERROR” “SMS Failed”, “Sending SMS failed”
“Admin UI”, “WARN”, “Login Failed”, “User:<X>”
"Admin UI", "WARN", "Login Failed", description
Info Events
"Admin UI", "INFO", "Logged out"
"Admin UI", "INFO", "Session destroyed"
"Admin UI", "INFO", "Logged in", description
"Admin UI", "INFO", "Clear Authentication Cache", “Cache is cleared for authentication source <X>"
"Admin UI", "INFO", "Clear Blacklist User Cache", “Blacklist Users cache is cleared for authentication source <X>"
Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
SNMP Private MIB, SNMP Traps, System Events, Error
Codes | 797