Logging

AuthNull uses fluentbit and can ship your logs to a wide variety of SIEMS or solutions that process logs. Since there's a lack of a frontend to configure this, reach out to your account manager to setup log shipping to a SIEM of your choice.

What kind of logs does AuthNull ship? AuthNull can ship central authentication logs, endpoint agent logs, active directory bridge logs, radius bridge logs and more.

What is the format of the logs? AuthNull ships logs in SYSLOG format.

How do I reduce the noise in the logs? Get in touch with your account manager so that we can send only certain kinds of logs and block all others.

Can I edit the log configuration on a self service basis? Right now the best way to do this is to edit a sample fluentbit config file which we can send to you.

Read What is Fluentbit? and configuring Fluentbit for more information.

Additionally watch this video for more information: