You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@metron.apache.org by GitBox <gi...@apache.org> on 2018/12/19 00:32:02 UTC
[GitHub] asfgit closed pull request #1249: METRON-1815: Separate
metron-parsers into metron-parsers-common and metron-parsers-storm
asfgit closed pull request #1249: METRON-1815: Separate metron-parsers into metron-parsers-common and metron-parsers-storm
URL: https://github.com/apache/metron/pull/1249
This is a PR merged from a forked repository.
As GitHub hides the original diff on merge, it is displayed below for
the sake of provenance:
As this is a foreign pull request (from a fork), the diff is supplied
below (as it won't show otherwise due to GitHub magic):
diff --git a/README.md b/README.md
index 95b6fafa75..3390e55a7c 100644
--- a/README.md
+++ b/README.md
@@ -132,7 +132,7 @@ component and Apache Kafka as the unified data bus.
Some high level links to the relevant subparts of the architecture, for
more information:
-* [Parsers](metron-platform/metron-parsers) : Parsing data from kafka into the Metron data model and passing it downstream to Enrichment.
+* [Parsers](metron-platform/metron-parsers-common) : Parsing data from kafka into the Metron data model and passing it downstream to Enrichment.
* [Enrichment](metron-platform/metron-enrichment) : Enriching data post-parsing and providing the ability to tag a message as an alert and assign a risk triage level via a custom rule language.
* [Indexing](metron-platform/metron-indexing) : Indexing the data post-enrichment into HDFS, Elasticsearch or Solr.
diff --git a/dependencies_with_url.csv b/dependencies_with_url.csv
index 0a6392246d..6b1c91522c 100644
--- a/dependencies_with_url.csv
+++ b/dependencies_with_url.csv
@@ -54,6 +54,7 @@ junit:junit:jar:4.12:compile,Eclipse Public License 1.0,http://junit.org
junit:junit:jar:4.4:compile,Common Public License Version 1.0,http://junit.org
net.razorvine:pyrolite:jar:4.13:compile,MIT,https://github.com/irmen/Pyrolite
net.sf.jopt-simple:jopt-simple:jar:3.2:compile,The MIT License,http://jopt-simple.sourceforge.net
+net.sf.jopt-simple:jopt-simple:jar:4.6:compile,The MIT License,http://jopt-simple.sourceforge.net
net.sf.jopt-simple:jopt-simple:jar:4.9:compile,The MIT License,http://jopt-simple.sourceforge.net
net.sf.saxon:Saxon-HE:jar:9.5.1-5:compile,Mozilla Public License Version 2.0,http://www.saxonica.com/
org.abego.treelayout:org.abego.treelayout.core:jar:1.0.1:compile,BSD 3-Clause "New" or "Revised" License (BSD-3-Clause),http://code.google.com/p/treelayout/
@@ -181,6 +182,7 @@ com.fasterxml.jackson.module:jackson-module-jaxb-annotations:jar:2.9.5:compile,A
com.fasterxml.woodstox:woodstox-core:jar:5.0.3:compile,ASLv2,https://github.com/FasterXML/woodstox
com.fasterxml:classmate:jar:1.3.1:compile,ASLv2,http://github.com/cowtowncoder/java-classmate
com.fasterxml:classmate:jar:1.3.4:compile,ASLv2,http://github.com/cowtowncoder/java-classmate
+com.google.code.gson:gson:jar:2.2.2:compile,The Apache Software License, Version 2.0,http://code.google.com/p/google-gson/
com.google.code.gson:gson:jar:2.2.4:compile,The Apache Software License, Version 2.0,http://code.google.com/p/google-gson/
com.google.code.gson:gson:jar:2.7:compile,The Apache Software License, Version 2.0,http://code.google.com/p/google-gson/
com.google.guava:guava:jar:11.0.2:compile,ASLv2,
diff --git a/metron-contrib/metron-docker/README.md b/metron-contrib/metron-docker/README.md
index 35364d4040..761cc6e281 100644
--- a/metron-contrib/metron-docker/README.md
+++ b/metron-contrib/metron-docker/README.md
@@ -122,7 +122,7 @@ Examples
### Deploy a new parser class
-After adding a new parser to metron-parsers, build Metron from the top level directory:
+After adding a new parser to metron-parsers-common, build Metron from the top level directory:
```
$ cd $METRON_HOME
$ mvn clean install -DskipTests
diff --git a/metron-contrib/metron-docker/compose/storm/Dockerfile b/metron-contrib/metron-docker/compose/storm/Dockerfile
index 78aeba40ec..8c90971ac5 100644
--- a/metron-contrib/metron-docker/compose/storm/Dockerfile
+++ b/metron-contrib/metron-docker/compose/storm/Dockerfile
@@ -27,7 +27,7 @@ ADD ./enrichment /enrichment
ADD ./indexing /indexing
ADD ./elasticsearch /elasticsearch
RUN mkdir -p $METRON_HOME
-RUN tar -xzf /parser/metron-parsers-$METRON_VERSION-archive.tar.gz -C /usr/metron/$METRON_VERSION/
+RUN tar -xzf /parser/metron-parsing-storm-$METRON_VERSION-archive.tar.gz -C /usr/metron/$METRON_VERSION/
RUN tar -xzf /enrichment/metron-enrichment-$METRON_VERSION-archive.tar.gz -C /usr/metron/$METRON_VERSION/
RUN sed -i -e "s/kafka.zk=.*:/kafka.zk=kafkazk:/g" /usr/metron/$METRON_VERSION/config/enrichment.properties
diff --git a/metron-contrib/metron-docker/install-metron.sh b/metron-contrib/metron-docker/install-metron.sh
index adc95a0ab4..b2fcaad9ad 100755
--- a/metron-contrib/metron-docker/install-metron.sh
+++ b/metron-contrib/metron-docker/install-metron.sh
@@ -29,7 +29,8 @@ mkdir -p $METRON_DOCKER_ROOT/storm/elasticsearch/
echo Installing HBase dependencies
cp $METRON_PLATFORM_ROOT/metron-data-management/target/metron-data-management-$METRON_VERSION-archive.tar.gz $METRON_DOCKER_ROOT/hbase/data-management
echo Installing Storm dependencies
-cp $METRON_PLATFORM_ROOT/metron-parsers/target/metron-parsers-$METRON_VERSION-archive.tar.gz $METRON_DOCKER_ROOT/storm/parser/
+cp $METRON_PLATFORM_ROOT/metron-parsers/metron-parsers-common/target/metron-parsers-common-$METRON_VERSION-archive.tar.gz $METRON_DOCKER_ROOT/storm/parser/
+cp $METRON_PLATFORM_ROOT/metron-parsers/metron-parsing-storm/target/metron-parsing-storm-$METRON_VERSION-archive.tar.gz $METRON_DOCKER_ROOT/storm/parser/
cp $METRON_PLATFORM_ROOT/metron-enrichment/target/metron-enrichment-$METRON_VERSION-archive.tar.gz $METRON_DOCKER_ROOT/storm/enrichment/
cp $METRON_PLATFORM_ROOT/metron-indexing/target/metron-indexing-$METRON_VERSION-archive.tar.gz $METRON_DOCKER_ROOT/storm/indexing/
echo Installing Elasticsearch dependencies
diff --git a/metron-contrib/metron-docker/pom.xml b/metron-contrib/metron-docker/pom.xml
index 47c4fc3255..3191ebc389 100644
--- a/metron-contrib/metron-docker/pom.xml
+++ b/metron-contrib/metron-docker/pom.xml
@@ -63,7 +63,7 @@
<outputDirectory>${project.basedir}/compose/kafkazk/packages</outputDirectory>
<resources>
<resource>
- <directory>${project.parent.parent.basedir}/metron-platform/metron-parsers/target/</directory>
+ <directory>${project.parent.parent.basedir}/metron-platform/metron-parsing/metron-parsers-common/target/</directory>
<includes>
<include>*.tar.gz</include>
</includes>
@@ -81,7 +81,7 @@
<outputDirectory>${project.basedir}/compose/kafkazk/packages</outputDirectory>
<resources>
<resource>
- <directory>${project.parent.parent.basedir}/metron-platform/metron-enrichment/target/</directory>
+ <directory>${project.parent.parent.basedir}/metron-platform/metron-parsing/metron-enrichment/target/</directory>
<includes>
<include>*.tar.gz</include>
</includes>
@@ -153,7 +153,7 @@
<outputDirectory>${project.basedir}/compose/storm/parser</outputDirectory>
<resources>
<resource>
- <directory>${project.parent.parent.basedir}/metron-platform/metron-parsers/target/</directory>
+ <directory>${project.parent.parent.basedir}/metron-platform/metron-parsing/metron-parsers-common/target/</directory>
<includes>
<include>*.tar.gz</include>
</includes>
diff --git a/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/metainfo.xml b/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/metainfo.xml
index 97b574922c..9516014f02 100644
--- a/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/metainfo.xml
+++ b/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/METRON/CURRENT/metainfo.xml
@@ -440,9 +440,15 @@
<package>
<name>metron-management</name>
</package>
+ <package>
+ <name>metron-parsers-common</name>
+ </package>
<package>
<name>metron-parsers</name>
</package>
+ <package>
+ <name>metron-parsing-storm</name>
+ </package>
<package>
<name>metron-enrichment</name>
</package>
diff --git a/metron-deployment/packaging/docker/deb-docker/pom.xml b/metron-deployment/packaging/docker/deb-docker/pom.xml
index 369ffee08a..19e9068ddc 100644
--- a/metron-deployment/packaging/docker/deb-docker/pom.xml
+++ b/metron-deployment/packaging/docker/deb-docker/pom.xml
@@ -108,7 +108,19 @@
</includes>
</resource>
<resource>
- <directory>${metron_dir}/metron-platform/metron-parsers/target/</directory>
+ <directory>${metron_dir}/metron-platform/metron-parsing/metron-parsers-common/target/</directory>
+ <includes>
+ <include>*.tar.gz</include>
+ </includes>
+ </resource>
+ <resource>
+ <directory>${metron_dir}/metron-platform/metron-parsing/metron-parsers/target/</directory>
+ <includes>
+ <include>*.tar.gz</include>
+ </includes>
+ </resource>
+ <resource>
+ <directory>${metron_dir}/metron-platform/metron-parsing/metron-parsing-storm/target/</directory>
<includes>
<include>*.tar.gz</include>
</includes>
diff --git a/metron-deployment/packaging/docker/rpm-docker/SPECS/metron.spec b/metron-deployment/packaging/docker/rpm-docker/SPECS/metron.spec
index 0d829d1cae..a16a8635a2 100644
--- a/metron-deployment/packaging/docker/rpm-docker/SPECS/metron.spec
+++ b/metron-deployment/packaging/docker/rpm-docker/SPECS/metron.spec
@@ -44,7 +44,7 @@ License: ASL 2.0
Group: Applications/Internet
URL: %{url}
Source0: metron-common-%{full_version}-archive.tar.gz
-Source1: metron-parsers-%{full_version}-archive.tar.gz
+Source1: metron-parsers-common-%{full_version}-archive.tar.gz
Source2: metron-elasticsearch-%{full_version}-archive.tar.gz
Source3: metron-data-management-%{full_version}-archive.tar.gz
Source4: metron-solr-%{full_version}-archive.tar.gz
@@ -60,6 +60,8 @@ Source13: metron-alerts-%{full_version}-archive.tar.gz
Source14: metron-performance-%{full_version}-archive.tar.gz
Source15: metron-profiler-spark-%{full_version}-archive.tar.gz
Source16: metron-profiler-repl-%{full_version}-archive.tar.gz
+Source17: metron-parsing-storm-%{full_version}-archive.tar.gz
+Source18: metron-parsers-%{full_version}-archive.tar.gz
%description
Apache Metron provides a scalable advanced security analytics framework
@@ -99,6 +101,8 @@ tar -xzf %{SOURCE13} -C %{buildroot}%{metron_home}
tar -xzf %{SOURCE14} -C %{buildroot}%{metron_home}
tar -xzf %{SOURCE15} -C %{buildroot}%{metron_home}
tar -xzf %{SOURCE16} -C %{buildroot}%{metron_home}
+tar -xzf %{SOURCE17} -C %{buildroot}%{metron_home}
+tar -xzf %{SOURCE18} -C %{buildroot}%{metron_home}
install %{buildroot}%{metron_home}/bin/metron-management-ui %{buildroot}/etc/init.d/
install %{buildroot}%{metron_home}/bin/metron-alerts-ui %{buildroot}/etc/init.d/
@@ -133,29 +137,49 @@ This package installs the Metron common files %{metron_home}
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+%package parsers-common
+Summary: Metron Parser Common Files
+Group: Applications/Internet
+Provides: parsers-common = %{version}
+
+%description parsers-common
+This package installs the Metron Parser Common files
+
+%files parsers-common
+%defattr(-,root,root,755)
+%dir %{metron_root}
+%dir %{metron_home}
+%dir %{metron_home}/config
+%dir %{metron_home}/config/zookeeper
+%dir %{metron_home}/config/zookeeper/parsers
+%dir %{metron_home}/patterns
+%dir %{metron_home}/lib
+%{metron_home}/config/zookeeper/parsers/jsonMap.json
+%{metron_home}/config/zookeeper/parsers/jsonMapQuery.json
+%{metron_home}/config/zookeeper/parsers/jsonMapWrappedQuery.json
+%{metron_home}/patterns/common
+%attr(0644,root,root) %{metron_home}/lib/metron-parsers-common-%{full_version}-uber.jar
+
+# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
%package parsers
-Summary: Metron Parser Files
+Summary: Metron Bundled Parser Files
Group: Applications/Internet
Provides: parsers = %{version}
%description parsers
-This package installs the Metron Parser files
+This package installs the Metron Bundled Parser files
%files parsers
%defattr(-,root,root,755)
%dir %{metron_root}
%dir %{metron_home}
-%dir %{metron_home}/bin
%dir %{metron_home}/config
%dir %{metron_home}/config/zookeeper
%dir %{metron_home}/config/zookeeper/parsers
%dir %{metron_home}/patterns
%dir %{metron_home}/lib
-%{metron_home}/bin/start_parser_topology.sh
%{metron_home}/config/zookeeper/parsers/bro.json
-%{metron_home}/config/zookeeper/parsers/jsonMap.json
-%{metron_home}/config/zookeeper/parsers/jsonMapQuery.json
-%{metron_home}/config/zookeeper/parsers/jsonMapWrappedQuery.json
%{metron_home}/config/zookeeper/parsers/snort.json
%{metron_home}/config/zookeeper/parsers/squid.json
%{metron_home}/config/zookeeper/parsers/syslog5424.json
@@ -163,7 +187,6 @@ This package installs the Metron Parser files
%{metron_home}/config/zookeeper/parsers/yaf.json
%{metron_home}/config/zookeeper/parsers/asa.json
%{metron_home}/patterns/asa
-%{metron_home}/patterns/common
%{metron_home}/patterns/fireeye
%{metron_home}/patterns/sourcefire
%{metron_home}/patterns/squid
@@ -173,6 +196,25 @@ This package installs the Metron Parser files
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+%package parsing-storm
+Summary: Metron Parser Storm Files
+Group: Applications/Internet
+Provides: parsing-storm = %{version}
+
+%description parsing-storm
+This package installs the Metron Parser Storm files
+
+%files parsing-storm
+%defattr(-,root,root,755)
+%dir %{metron_root}
+%dir %{metron_home}
+%dir %{metron_home}/bin
+%dir %{metron_home}/lib
+%{metron_home}/bin/start_parser_topology.sh
+%attr(0644,root,root) %{metron_home}/lib/metron-parsing-storm-%{full_version}-uber.jar
+
+# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
%package elasticsearch
Summary: Metron Elasticsearch Files
Group: Applications/Internet
@@ -591,6 +633,8 @@ chkconfig --del metron-management-ui
chkconfig --del metron-alerts-ui
%changelog
+* Thu Nov 15 2018 Apache Metron <de...@metron.apache.org> - 0.7.0
+- Split metron-parsers into metron-parsing and submodules
* Wed Oct 31 2018 Apache Metron <de...@metron.apache.org> - 0.7.0
- Update files in Management UI from Angular upgrade
* Thu Aug 30 2018 Apache Metron <de...@metron.apache.org> - 0.7.0
diff --git a/metron-deployment/packaging/docker/rpm-docker/pom.xml b/metron-deployment/packaging/docker/rpm-docker/pom.xml
index db5a0e619a..e876652052 100644
--- a/metron-deployment/packaging/docker/rpm-docker/pom.xml
+++ b/metron-deployment/packaging/docker/rpm-docker/pom.xml
@@ -144,7 +144,19 @@
</includes>
</resource>
<resource>
- <directory>${metron_dir}/metron-platform/metron-parsers/target/</directory>
+ <directory>${metron_dir}/metron-platform/metron-parsing/metron-parsers/target/</directory>
+ <includes>
+ <include>*.tar.gz</include>
+ </includes>
+ </resource>
+ <resource>
+ <directory>${metron_dir}/metron-platform/metron-parsing/metron-parsers-common/target/</directory>
+ <includes>
+ <include>*.tar.gz</include>
+ </includes>
+ </resource>
+ <resource>
+ <directory>${metron_dir}/metron-platform/metron-parsing/metron-parsing-storm/target/</directory>
<includes>
<include>*.tar.gz</include>
</includes>
diff --git a/metron-interface/metron-rest/pom.xml b/metron-interface/metron-rest/pom.xml
index 0d98b9fa17..67a6820267 100644
--- a/metron-interface/metron-rest/pom.xml
+++ b/metron-interface/metron-rest/pom.xml
@@ -237,7 +237,7 @@
</dependency>
<dependency>
<groupId>org.apache.metron</groupId>
- <artifactId>metron-parsers</artifactId>
+ <artifactId>metron-parsers-common</artifactId>
<version>${project.parent.version}</version>
<scope>provided</scope>
<exclusions>
@@ -267,6 +267,38 @@
</exclusion>
</exclusions>
</dependency>
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-parsers</artifactId>
+ <version>${project.parent.version}</version>
+ <scope>provided</scope>
+ <exclusions>
+ <exclusion>
+ <groupId>org.apache.hbase</groupId>
+ <artifactId>hbase-client</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>com.fasterxml.jackson.core</groupId>
+ <artifactId>jackson-databind</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-profiler-client</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-statistics</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-writer</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>com.google.guava</groupId>
+ <artifactId>guava</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
<dependency>
<groupId>com.jayway.jsonpath</groupId>
<artifactId>json-path</artifactId>
diff --git a/metron-interface/metron-rest/src/main/java/org/apache/metron/rest/config/GrokConfig.java b/metron-interface/metron-rest/src/main/java/org/apache/metron/rest/config/GrokConfig.java
index 1166e9cd26..6b0bc1b2fb 100644
--- a/metron-interface/metron-rest/src/main/java/org/apache/metron/rest/config/GrokConfig.java
+++ b/metron-interface/metron-rest/src/main/java/org/apache/metron/rest/config/GrokConfig.java
@@ -30,7 +30,8 @@
@Bean
public Grok commonGrok() throws GrokException {
Grok grok = new Grok();
- grok.addPatternFromReader(new InputStreamReader(getClass().getResourceAsStream("/patterns/common")));
+ grok.addPatternFromReader(new InputStreamReader(getClass().getResourceAsStream(
+ "/patterns/common")));
return grok;
}
}
diff --git a/metron-interface/metron-rest/src/main/java/org/apache/metron/rest/service/impl/GrokServiceImpl.java b/metron-interface/metron-rest/src/main/java/org/apache/metron/rest/service/impl/GrokServiceImpl.java
index 4a3963509d..11ab664d07 100644
--- a/metron-interface/metron-rest/src/main/java/org/apache/metron/rest/service/impl/GrokServiceImpl.java
+++ b/metron-interface/metron-rest/src/main/java/org/apache/metron/rest/service/impl/GrokServiceImpl.java
@@ -71,7 +71,8 @@ public GrokValidation validateGrokStatement(GrokValidation grokValidation) throw
throw new RestException("Grok statement is required");
}
Grok grok = new Grok();
- grok.addPatternFromReader(new InputStreamReader(getClass().getResourceAsStream("/patterns/common")));
+ grok.addPatternFromReader(new InputStreamReader(getClass().getResourceAsStream(
+ "/patterns/common")));
grok.addPatternFromReader(new StringReader(grokValidation.getStatement()));
String grokPattern = "%{" + grokValidation.getPatternLabel() + "}";
grok.compile(grokPattern);
diff --git a/metron-interface/metron-rest/src/main/scripts/metron-rest.sh b/metron-interface/metron-rest/src/main/scripts/metron-rest.sh
index b454b8e355..6f07925f8b 100644
--- a/metron-interface/metron-rest/src/main/scripts/metron-rest.sh
+++ b/metron-interface/metron-rest/src/main/scripts/metron-rest.sh
@@ -38,7 +38,8 @@ METRON_PID_FILE="${METRON_PID_FILE:-/var/run/metron/metron-rest.pid}"
PARSER_CONTRIB=${PARSER_CONTRIB:-$METRON_HOME/parser_contrib}
INDEXING_CONTRIB=${INDEXING_CONTRIB:-$METRON_HOME/indexing_contrib}
-PARSER_LIB=$(find $METRON_HOME/lib/ -name metron-parsers*.jar)
+METRON_PARSERS_PLATFORM="${METRON_PARSERS_PLATFORM:-storm}"
+PARSER_LIB=$(find $METRON_HOME/lib/ -name metron-parsing-${METRON_PARSERS_PLATFORM}*.jar)
echo "METRON_VERSION=${METRON_VERSION}"
echo "METRON_HOME=${METRON_HOME}"
diff --git a/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/controller/GrokControllerIntegrationTest.java b/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/controller/GrokControllerIntegrationTest.java
index 8888eb0b58..b2f98fbe28 100644
--- a/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/controller/GrokControllerIntegrationTest.java
+++ b/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/controller/GrokControllerIntegrationTest.java
@@ -131,7 +131,7 @@ public void test() throws Exception {
.andExpect(content().contentType(MediaType.parseMediaType("application/json;charset=UTF-8")))
.andExpect(jsonPath("$").isNotEmpty());
- String statement = FileUtils.readFileToString(new File("../../metron-platform/metron-parsers/src/main/resources/patterns/squid"));
+ String statement = FileUtils.readFileToString(new File("../../metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/squid"));
this.mockMvc.perform(get(grokUrl + "/get/statement?path=/patterns/squid").with(httpBasic(user,password)))
.andExpect(status().isOk())
.andExpect(content().contentType(MediaType.parseMediaType("text/plain;charset=UTF-8")))
diff --git a/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/service/impl/GrokServiceImplTest.java b/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/service/impl/GrokServiceImplTest.java
index 8f7f40c51f..f308ba3417 100644
--- a/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/service/impl/GrokServiceImplTest.java
+++ b/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/service/impl/GrokServiceImplTest.java
@@ -215,7 +215,8 @@ public void missingGrokStatementShouldThrowRestException() throws Exception {
@Test
public void getStatementFromClasspathShouldReturnStatement() throws Exception {
- String expected = FileUtils.readFileToString(new File("../../metron-platform/metron-parsers/src/main/resources/patterns/squid"));
+ String expected = FileUtils.readFileToString(new File(
+ "../../metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/squid"));
assertEquals(expected, grokService.getStatementFromClasspath("/patterns/squid"));
}
diff --git a/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/service/impl/SensorParserConfigServiceImplTest.java b/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/service/impl/SensorParserConfigServiceImplTest.java
index e6163c0ae7..3e54e07582 100644
--- a/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/service/impl/SensorParserConfigServiceImplTest.java
+++ b/metron-interface/metron-rest/src/test/java/org/apache/metron/rest/service/impl/SensorParserConfigServiceImplTest.java
@@ -28,6 +28,7 @@
import org.apache.curator.framework.api.SetDataBuilder;
import org.apache.hadoop.conf.Configuration;
import org.apache.metron.common.configuration.ConfigurationType;
+import org.apache.metron.common.configuration.ConfigurationType;
import org.apache.metron.common.configuration.ParserConfigurations;
import org.apache.metron.common.configuration.SensorParserConfig;
import org.apache.metron.common.zookeeper.ConfigurationsCache;
diff --git a/metron-platform/Performance-tuning-guide.md b/metron-platform/Performance-tuning-guide.md
index cb69cb86a3..ff83c8078c 100644
--- a/metron-platform/Performance-tuning-guide.md
+++ b/metron-platform/Performance-tuning-guide.md
@@ -65,7 +65,7 @@ one consumer in a given consumer group were able to read from that partition.
If you are using stellar field transformations in your sensors, by default, stellar expressions
are not cached. Sensors that use stellar field transformations by see a performance
boost by turning on caching via setting the `cacheConfig`
-[property](metron-parsers#parser_configuration).
+[property](metron-parsers-common#parser_configuration).
This is beneficial if your transformations:
* Are complex (e.g. `ENRICHMENT_GET` calls or other high latency calls)
@@ -170,7 +170,7 @@ using a Storm Flux file, a configuration properties file, and Ambari. Here is a
This is a mapping of the various performance tuning properties for parsers and how they are materialized.
-See more detail on starting parsers [here](https://github.com/apache/metron/blob/master/metron-platform/metron-parsers/README.md#starting-the-parser-topology)
+See more detail on starting parsers [here](https://github.com/apache/metron/blob/master/metron-platform/metron-parsing/metron-parsers-common/README.md#starting-the-parser-topology)
| Category | Management UI Property Name | JSON Config File Property Name | CLI Option | Storm Property Name | Notes |
|-----------------------------|--------------------------------------------|------------------------------------|------------------------------------------------------------------------------------------------|---------------------------------|-------------------------------------------------------------------------------|
@@ -427,7 +427,7 @@ though you could certainly do so if necessary. Notice that we only needed 1 work
-z $ZOOKEEPER \
```
-From the usage docs, here are the options we've used. The full reference can be found [here](../metron-platform/metron-parsers/README.md#Starting_the_Parser_Topology).
+From the usage docs, here are the options we've used. The full reference can be found [here](../metron-platform/metron-parsing/metron-parsers-common/README.md#Starting_the_Parser_Topology).
```
usage: start_parser_topology.sh
diff --git a/metron-platform/metron-common/README.md b/metron-platform/metron-common/README.md
index d68259a5f2..20f0eef9a3 100644
--- a/metron-platform/metron-common/README.md
+++ b/metron-platform/metron-common/README.md
@@ -79,30 +79,30 @@ This configuration is stored in zookeeper, but looks something like
Various parts of our stack uses the global config are documented throughout the Metron documentation,
but a convenient index is provided here:
-| Property Name | Subsystem | Type | Ambari Property |
-|---------------------------------------------------------------------------------------------------------------------|---------------|------------|------------------------------|
-| [`es.clustername`](../metron-elasticsearch#esclustername) | Indexing | String | `es_cluster_name` |
-| [`es.ip`](../metron-elasticsearch#esip) | Indexing | String | `es_hosts` |
-| [`es.port`](../metron-elasticsearch#esport) | Indexing | String | `es_port` |
-| [`es.date.format`](../metron-elasticsearch#esdateformat) | Indexing | String | `es_date_format` |
-| [`es.client.settings`](../metron-elasticsearch#esclientsettings) | Indexing | Object | N/A |
-| [`fieldValidations`](#validation-framework) | Parsing | Object | N/A |
-| [`parser.error.topic`](../metron-parsers#parsererrortopic) | Parsing | String | N/A |
-| [`stellar.function.paths`](../../metron-stellar/stellar-common#stellarfunctionpaths) | Stellar | CSV String | N/A |
-| [`stellar.function.resolver.includes`](../../metron-stellar/stellar-common#stellarfunctionresolverincludesexcludes) | Stellar | CSV String | N/A |
-| [`stellar.function.resolver.excludes`](../../metron-stellar/stellar-common#stellarfunctionresolverincludesexcludes) | Stellar | CSV String | N/A |
-| [`profiler.period.duration`](../../metron-analytics/metron-profiler#profilerperiodduration) | Profiler | Integer | `profiler_period_duration` |
-| [`profiler.period.duration.units`](../../metron-analytics/metron-profiler#profilerperioddurationunits) | Profiler | String | `profiler_period_units` |
-| [`profiler.writer.batchSize`](../../metron-analytics/metron-profiler/#profilerwriterbatchsize) | Profiler | Integer | N/A |
-| [`profiler.writer.batchTimeout`](../../metron-analytics/metron-profiler/#profilerwriterbatchtimeout) | Profiler | Integer | N/A |
-| [`update.hbase.table`](../metron-indexing#updatehbasetable) | REST/Indexing | String | `update_hbase_table` |
-| [`update.hbase.cf`](../metron-indexing#updatehbasecf) | REST/Indexing | String | `update_hbase_cf` |
-| [`geo.hdfs.file`](../metron-enrichment#geohdfsfile) | Enrichment | String | `geo_hdfs_file` |
-| [`enrichment.writer.batchSize`](../metron-enrichment#enrichmentwriterbatchsize) | Enrichment | Integer | N/A |
-| [`enrichment.writer.batchTimeout`](../metron-enrichment#enrichmentwriterbatchtimeout) | Enrichment | Integer | N/A |
-| [`geo.hdfs.file`](../metron-enrichment#geohdfsfile) | Enrichment | String | `geo_hdfs_file` |
-| [`source.type.field`](../../metron-interface/metron-alerts#sourcetypefield) | UI | String | `source_type_field` |
-| [`threat.triage.score.field`](../../metron-interface/metron-alerts#threattriagescorefield) | UI | String | `threat_triage_score_field` |
+| Property Name | Subsystem | Type | Ambari Property |
+|---------------------------------------------------------------------------------------------------------------------|---------------|------------|----------------------------|
+| [`es.clustername`](../metron-elasticsearch#esclustername) | Indexing | String | `es_cluster_name` |
+| [`es.ip`](../metron-elasticsearch#esip) | Indexing | String | `es_hosts` |
+| [`es.port`](../metron-elasticsearch#esport) | Indexing | String | `es_port` |
+| [`es.date.format`](../metron-elasticsearch#esdateformat) | Indexing | String | `es_date_format` |
+| [`es.client.settings`](../metron-elasticsearch#esclientsettings) | Indexing | Object | N/A |
+| [`fieldValidations`](#validation-framework) | Parsing | Object | N/A |
+| [`parser.error.topic`](../metron-parsers#parsererrortopic) | Parsing | String | N/A |
+| [`stellar.function.paths`](../../metron-stellar/stellar-common#stellarfunctionpaths) | Stellar | CSV String | N/A |
+| [`stellar.function.resolver.includes`](../../metron-stellar/stellar-common#stellarfunctionresolverincludesexcludes) | Stellar | CSV String | N/A |
+| [`stellar.function.resolver.excludes`](../../metron-stellar/stellar-common#stellarfunctionresolverincludesexcludes) | Stellar | CSV String | N/A |
+| [`profiler.period.duration`](../../metron-analytics/metron-profiler#profilerperiodduration) | Profiler | Integer | `profiler_period_duration` |
+| [`profiler.period.duration.units`](../../metron-analytics/metron-profiler#profilerperioddurationunits) | Profiler | String | `profiler_period_units` |
+| [`profiler.writer.batchSize`](../../metron-analytics/metron-profiler/#profilerwriterbatchsize) | Profiler | Integer | N/A |
+| [`profiler.writer.batchTimeout`](../../metron-analytics/metron-profiler/#profilerwriterbatchtimeout) | Profiler | Integer | N/A |
+| [`update.hbase.table`](../metron-indexing#updatehbasetable) | REST/Indexing | String | `update_hbase_table` |
+| [`update.hbase.cf`](../metron-indexing#updatehbasecf) | REST/Indexing | String | `update_hbase_cf` |
+| [`geo.hdfs.file`](../metron-enrichment#geohdfsfile) | Enrichment | String | `geo_hdfs_file` |
+| [`enrichment.writer.batchSize`](../metron-enrichment#enrichmentwriterbatchsize) | Enrichment | Integer | N/A |
+| [`enrichment.writer.batchTimeout`](../metron-enrichment#enrichmentwriterbatchtimeout) | Enrichment | Integer | N/A |
+| [`geo.hdfs.file`](../metron-enrichment#geohdfsfile) | Enrichment | String | `geo_hdfs_file` |
+| [`source.type.field`](../../metron-interface/metron-alerts#sourcetypefield) | UI | String | `source_type_field` |
+| [`threat.triage.score.field`](../../metron-interface/metron-alerts#threattriagescorefield) | UI | String | `threat_triage_score_field` |
## Note Configs in Ambari
If a field is managed via ambari, you should change the field via
@@ -440,4 +440,3 @@ Options:
-p DIRECTORY, --hdp_home=DIRECTORY
HDP home directory
```
-`
diff --git a/metron-platform/metron-common/src/main/scripts/stellar b/metron-platform/metron-common/src/main/scripts/stellar
index 690a9f09ca..a538e136c9 100644
--- a/metron-platform/metron-common/src/main/scripts/stellar
+++ b/metron-platform/metron-common/src/main/scripts/stellar
@@ -36,8 +36,9 @@ fi
# treat unset vars as an error; METRON_HOME
set -u
+export METRON_PARSERS_PLATFORM="${METRON_PARSERS_PLATFORM:-storm}"
export HBASE_CONFIGS=$(hbase classpath)
-export STELLAR_LIB=$(find $METRON_HOME/lib/ -name metron-parsers*.jar)
+export STELLAR_LIB=$(find $METRON_HOME/lib/ -name metron-parsers-${METRON_PARSERS_PLATFORM}*.jar)
export MANAGEMENT_LIB=$(find $METRON_HOME/lib/ -name metron-management*.jar)
export PROFILER_LIB=$(find $METRON_HOME/lib/ -name metron-profiler-repl*.jar)
java $METRON_JVMFLAGS -cp "${CONTRIB:-$METRON_HOME/contrib/*}:$STELLAR_LIB:$MANAGEMENT_LIB:$PROFILER_LIB:$HBASE_CONFIGS" org.apache.metron.stellar.common.shell.cli.StellarShell "$@"
diff --git a/metron-platform/metron-common/src/main/scripts/zk_load_configs.sh b/metron-platform/metron-common/src/main/scripts/zk_load_configs.sh
index 2380d13b6e..b22bb4b08a 100755
--- a/metron-platform/metron-common/src/main/scripts/zk_load_configs.sh
+++ b/metron-platform/metron-common/src/main/scripts/zk_load_configs.sh
@@ -29,7 +29,8 @@ fi
export METRON_VERSION=${project.version}
export METRON_HOME=/usr/metron/$METRON_VERSION
export CLASSNAME="org.apache.metron.common.cli.ConfigurationManager"
-export JAR=metron-parsers-$METRON_VERSION-uber.jar
+export JAR=metron-parsers-common-$METRON_VERSION-uber.jar
+# TODO export the Storm jar?
export HBASE_HOME=${HBASE_HOME:-/usr/hdp/current/hbase-client}
CP=$METRON_HOME/lib/$JAR:${HBASE_HOME}/lib/hbase-server.jar:`${HBASE_HOME}/bin/hbase classpath`
diff --git a/metron-platform/metron-common/src/test/java/org/apache/metron/common/configuration/ConfigurationsUtilsTest.java b/metron-platform/metron-common/src/test/java/org/apache/metron/common/configuration/ConfigurationsUtilsTest.java
index 8f8cb54fae..9379285ec8 100644
--- a/metron-platform/metron-common/src/test/java/org/apache/metron/common/configuration/ConfigurationsUtilsTest.java
+++ b/metron-platform/metron-common/src/test/java/org/apache/metron/common/configuration/ConfigurationsUtilsTest.java
@@ -32,6 +32,7 @@
import org.apache.metron.TestConstants;
import org.apache.metron.common.utils.JSONUtils;
import org.junit.After;
+
import org.junit.Assert;
import org.junit.Before;
import org.junit.Test;
diff --git a/metron-platform/metron-management/pom.xml b/metron-platform/metron-management/pom.xml
index 844439d383..85bbc23563 100644
--- a/metron-platform/metron-management/pom.xml
+++ b/metron-platform/metron-management/pom.xml
@@ -50,6 +50,18 @@
</exclusions>
<scope>provided</scope>
</dependency>
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-parsers-common</artifactId>
+ <version>${project.parent.version}</version>
+ <exclusions>
+ <exclusion>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-writer</artifactId>
+ </exclusion>
+ </exclusions>
+ <scope>provided</scope>
+ </dependency>
<dependency>
<groupId>org.apache.metron</groupId>
<artifactId>stellar-common</artifactId>
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/SettingsLoader.java b/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/SettingsLoader.java
deleted file mode 100644
index 1c64c16757..0000000000
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/SettingsLoader.java
+++ /dev/null
@@ -1,166 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.apache.metron.parsers;
-
-import java.util.HashMap;
-import java.util.Iterator;
-import java.util.Map;
-
-import org.apache.commons.configuration.Configuration;
-import org.apache.commons.configuration.ConfigurationException;
-import org.apache.commons.configuration.PropertiesConfiguration;
-import org.apache.commons.configuration.XMLConfiguration;
-import org.json.simple.JSONArray;
-import org.json.simple.JSONObject;
-import org.json.simple.parser.JSONParser;
-import org.json.simple.parser.ParseException;
-
-public class SettingsLoader {
-
- @SuppressWarnings("unchecked")
- public static JSONObject loadEnvironmentIdnetifier(String config_path)
- throws ConfigurationException {
- Configuration config = new PropertiesConfiguration(config_path);
-
- String customer = config.getString("customer.id", "unknown");
- String datacenter = config.getString("datacenter.id", "unknown");
- String instance = config.getString("instance.id", "unknown");
-
- JSONObject identifier = new JSONObject();
- identifier.put("customer", customer);
- identifier.put("datacenter", datacenter);
- identifier.put("instance", instance);
-
- return identifier;
- }
-
- @SuppressWarnings("unchecked")
- public static JSONObject loadTopologyIdnetifier(String config_path)
- throws ConfigurationException {
- Configuration config = new PropertiesConfiguration(config_path);
-
- String topology = config.getString("topology.id", "unknown");
- String instance = config.getString("instance.id", "unknown");
-
- JSONObject identifier = new JSONObject();
- identifier.put("topology", topology);
- identifier.put("topology_instance", instance);
-
- return identifier;
- }
-
-
- public static String generateTopologyName(JSONObject env, JSONObject topo) {
-
- return (env.get("customer") + "_" + env.get("datacenter") + "_"
- + env.get("instance") + "_" + topo.get("topology") + "_" + topo.get("topology_instance"));
- }
-
- @SuppressWarnings("unchecked")
- public static JSONObject generateAlertsIdentifier(JSONObject env, JSONObject topo)
- {
- JSONObject identifier = new JSONObject();
- identifier.put("environment", env);
- identifier.put("topology", topo);
-
- return identifier;
- }
-
- public static Map<String, JSONObject> loadRegexAlerts(String config_path)
- throws ConfigurationException, ParseException {
- XMLConfiguration alert_rules = new XMLConfiguration();
- alert_rules.setDelimiterParsingDisabled(true);
- alert_rules.load(config_path);
-
- //int number_of_rules = alert_rules.getList("rule.pattern").size();
-
- String[] patterns = alert_rules.getStringArray("rule.pattern");
- String[] alerts = alert_rules.getStringArray("rule.alert");
-
- JSONParser pr = new JSONParser();
- Map<String, JSONObject> rules = new HashMap<String, JSONObject>();
-
- for (int i = 0; i < patterns.length; i++)
- rules.put(patterns[i], (JSONObject) pr.parse(alerts[i]));
-
- return rules;
- }
-
- public static Map<String, JSONObject> loadKnownHosts(String config_path)
- throws ConfigurationException, ParseException {
- Configuration hosts = new PropertiesConfiguration(config_path);
-
- Iterator<String> keys = hosts.getKeys();
- Map<String, JSONObject> known_hosts = new HashMap<String, JSONObject>();
- JSONParser parser = new JSONParser();
-
- while (keys.hasNext()) {
- String key = keys.next().trim();
- JSONArray value = (JSONArray) parser.parse(hosts.getProperty(key)
- .toString());
- known_hosts.put(key, (JSONObject) value.get(0));
- }
-
- return known_hosts;
- }
-
- public static void printConfigOptions(PropertiesConfiguration config, String path_fragment)
- {
- Iterator<String> itr = config.getKeys();
-
- while(itr.hasNext())
- {
- String key = itr.next();
-
- if(key.contains(path_fragment))
- {
-
- System.out.println("[Metron] Key: " + key + " -> " + config.getString(key));
- }
- }
-
- }
-
- public static void printOptionalSettings(Map<String, String> settings)
- {
- for(String setting: settings.keySet())
- {
- System.out.println("[Metron] Optional Setting: " + setting + " -> " +settings.get(setting));
- }
-
- }
-
- public static Map<String, String> getConfigOptions(PropertiesConfiguration config, String path_fragment)
- {
- Iterator<String> itr = config.getKeys();
- Map<String, String> settings = new HashMap<String, String>();
-
- while(itr.hasNext())
- {
- String key = itr.next();
-
- if(key.contains(path_fragment))
- {
- String tmp_key = key.replace(path_fragment, "");
- settings.put(tmp_key, config.getString(key));
- }
- }
-
- return settings;
- }
-}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/AsaIntegrationTest.java b/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/AsaIntegrationTest.java
deleted file mode 100644
index 3ff07ad3d3..0000000000
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/AsaIntegrationTest.java
+++ /dev/null
@@ -1,37 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.apache.metron.parsers.integration;
-
-import org.apache.metron.parsers.integration.validation.SampleDataValidation;
-
-import java.util.ArrayList;
-import java.util.List;
-
-public class AsaIntegrationTest extends ParserIntegrationTest {
- @Override
- String getSensorType() {
- return "asa";
- }
-
- @Override
- List<ParserValidation> getValidations() {
- return new ArrayList<ParserValidation>() {{
- add(new SampleDataValidation());
- }};
- }
-}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/JSONMapIntegrationTest.java b/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/JSONMapIntegrationTest.java
deleted file mode 100644
index 13a7835475..0000000000
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/JSONMapIntegrationTest.java
+++ /dev/null
@@ -1,37 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.apache.metron.parsers.integration;
-
-import org.apache.metron.parsers.integration.validation.SampleDataValidation;
-
-import java.util.ArrayList;
-import java.util.List;
-
-public class JSONMapIntegrationTest extends ParserIntegrationTest {
- @Override
- String getSensorType() {
- return "jsonMap";
- }
-
- @Override
- List<ParserValidation> getValidations() {
- return new ArrayList<ParserValidation>() {{
- add(new SampleDataValidation());
- }};
- }
-}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/JSONMapQueryIntegrationTest.java b/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/JSONMapQueryIntegrationTest.java
deleted file mode 100644
index cec6242719..0000000000
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/JSONMapQueryIntegrationTest.java
+++ /dev/null
@@ -1,36 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.apache.metron.parsers.integration;
-
-import java.util.ArrayList;
-import java.util.List;
-import org.apache.metron.parsers.integration.validation.SampleDataValidation;
-
-public class JSONMapQueryIntegrationTest extends ParserIntegrationTest {
- @Override
- String getSensorType() {
- return "jsonMapQuery";
- }
-
- @Override
- List<ParserValidation> getValidations() {
- return new ArrayList<ParserValidation>() {{
- add(new SampleDataValidation());
- }};
- }
-}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/JSONMapWrappedQueryIntegrationTest.java b/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/JSONMapWrappedQueryIntegrationTest.java
deleted file mode 100644
index 569e175dec..0000000000
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/JSONMapWrappedQueryIntegrationTest.java
+++ /dev/null
@@ -1,37 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.apache.metron.parsers.integration;
-
-import org.apache.metron.parsers.integration.validation.SampleDataValidation;
-
-import java.util.ArrayList;
-import java.util.List;
-
-public class JSONMapWrappedQueryIntegrationTest extends ParserIntegrationTest {
- @Override
- String getSensorType() {
- return "jsonMapWrappedQuery";
- }
-
- @Override
- List<ParserValidation> getValidations() {
- return new ArrayList<ParserValidation>() {{
- add(new SampleDataValidation());
- }};
- }
-}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/SnortIntegrationTest.java b/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/SnortIntegrationTest.java
deleted file mode 100644
index 244dd891b4..0000000000
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/SnortIntegrationTest.java
+++ /dev/null
@@ -1,37 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.apache.metron.parsers.integration;
-
-import org.apache.metron.parsers.integration.validation.SampleDataValidation;
-
-import java.util.ArrayList;
-import java.util.List;
-
-public class SnortIntegrationTest extends ParserIntegrationTest {
- @Override
- String getSensorType() {
- return "snort";
- }
-
- @Override
- List<ParserValidation> getValidations() {
- return new ArrayList<ParserValidation>() {{
- add(new SampleDataValidation());
- }};
- }
-}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/SquidIntegrationTest.java b/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/SquidIntegrationTest.java
deleted file mode 100644
index 9c03e81084..0000000000
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/SquidIntegrationTest.java
+++ /dev/null
@@ -1,37 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.apache.metron.parsers.integration;
-
-import org.apache.metron.parsers.integration.validation.SampleDataValidation;
-
-import java.util.ArrayList;
-import java.util.List;
-
-public class SquidIntegrationTest extends ParserIntegrationTest {
- @Override
- String getSensorType() {
- return "squid";
- }
-
- @Override
- List<ParserValidation> getValidations() {
- return new ArrayList<ParserValidation>() {{
- add(new SampleDataValidation());
- }};
- }
-}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/Syslog5424ParserIntegrationTest.java b/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/Syslog5424ParserIntegrationTest.java
deleted file mode 100644
index c9c47ce3e5..0000000000
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/Syslog5424ParserIntegrationTest.java
+++ /dev/null
@@ -1,37 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.apache.metron.parsers.integration;
-
-import org.apache.metron.parsers.integration.validation.SampleDataValidation;
-
-import java.util.ArrayList;
-import java.util.List;
-
-public class Syslog5424ParserIntegrationTest extends ParserIntegrationTest {
- @Override
- String getSensorType() {
- return "syslog5424";
- }
-
- @Override
- List<ParserValidation> getValidations() {
- return new ArrayList<ParserValidation>() {{
- add(new SampleDataValidation());
- }};
- }
-}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/WebSphereIntegrationTest.java b/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/WebSphereIntegrationTest.java
deleted file mode 100644
index 5dc0ac6b80..0000000000
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/WebSphereIntegrationTest.java
+++ /dev/null
@@ -1,40 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-package org.apache.metron.parsers.integration;
-
-import org.apache.metron.parsers.integration.validation.SampleDataValidation;
-
-import java.util.ArrayList;
-import java.util.List;
-
-public class WebSphereIntegrationTest extends ParserIntegrationTest {
-
- @Override
- public String getSensorType() {
- return "websphere";
- }
-
- @Override
- List<ParserValidation> getValidations() {
- return new ArrayList<ParserValidation>() {{
- add(new SampleDataValidation());
- }};
- }
-
-}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/YafIntegrationTest.java b/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/YafIntegrationTest.java
deleted file mode 100644
index 9930c2c36b..0000000000
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/YafIntegrationTest.java
+++ /dev/null
@@ -1,37 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-package org.apache.metron.parsers.integration;
-
-import org.apache.metron.parsers.integration.validation.SampleDataValidation;
-
-import java.util.ArrayList;
-import java.util.List;
-
-public class YafIntegrationTest extends ParserIntegrationTest {
- @Override
- String getSensorType() {
- return "yaf";
- }
-
- @Override
- List<ParserValidation> getValidations() {
- return new ArrayList<ParserValidation>() {{
- add(new SampleDataValidation());
- }};
- }
-}
diff --git a/metron-platform/metron-parsers/README.md b/metron-platform/metron-parsing/README.md
similarity index 76%
rename from metron-platform/metron-parsers/README.md
rename to metron-platform/metron-parsing/README.md
index 5aff84abf1..76b6168dca 100644
--- a/metron-platform/metron-parsers/README.md
+++ b/metron-platform/metron-parsing/README.md
@@ -151,7 +151,7 @@ messages or marking messages as invalid.
### Invalidation Errors
There are two reasons a message will be marked as invalid:
-* Fail [global validation](../metron-common#validation-framework)
+* Fail [global validation](../../metron-common#validation-framework)
* Fail the parser's validate function (generally that means to not have a `timestamp` field or a `original_string` field.
Those messages which are marked as invalid are sent to the error queue
@@ -174,19 +174,12 @@ through.
-Data flows through the parser bolt via kafka and into the `enrichments`
+Data flows through the parser via kafka and into the `enrichments`
topology in kafka. Errors are collected with the context of the error
(e.g. stacktrace) and original message causing the error and sent to an
`error` queue. Invalid messages as determined by global validation
functions are also treated as errors and sent to an `error` queue.
-Multiple sensors can be aggregated into a single Storm topology. When this is done, there will be
-multiple Kafka spouts, but only a single parser bolt which will handle delegating to the correct
-parser as needed. There are some constraints around this, in particular regarding some configuration.
-Additionally, all sensors must flow to the same error topic. The Kafka topic is retrieved from the input Tuple itself.
-
-A worked example of this can be found in the [Parser Chaining use case](../../use-cases/parser_chaining/README.md#aggregated-parsers-with-parser-chaining).
-
## Message Format
All Metron messages follow a specific format in order to ingest a message. If a message does not conform to this format it will be dropped and put onto an error queue for further examination. The message must be of a JSON format and must have a JSON tag message like so:
@@ -274,19 +267,9 @@ then it is assumed to be a regex and will match any topic matching the pattern (
* `batchTimeout` : The timeout after which a batch will be flushed even if batchSize has not been met. Optional.
If unspecified, or set to `0`, it defaults to a system-determined duration which is a fraction of the Storm
parameter `topology.message.timeout.secs`. Ignored if batchSize is `1`, since this disables batching.
- * The kafka writer can be configured within the parser config as well. (This is all configured a priori, but this is convenient for overriding the settings). See [here](../metron-writer/README.md#kafka-writer)
+ * The kafka writer can be configured within the parser config as well. (This is all configured a priori, but this is convenient for overriding the settings). See [here](../../metron-writer/README.md#kafka-writer)
* `fieldTransformations` : An array of complex objects representing the transformations to be done on the message generated from the parser before writing out to the kafka topic.
-* `spoutParallelism` : The kafka spout parallelism (default to `1`). This can be overridden on the command line, and if there are multiple sensors should be in a comma separated list in the same order as the sensors.
-* `spoutNumTasks` : The number of tasks for the spout (default to `1`). This can be overridden on the command line, and if there are multiple sensors should be in a comma separated list in the same order as the sensors.
-* `parserParallelism` : The parser bolt parallelism (default to `1`). If there are multiple sensors, the last one's configuration will be used. This can be overridden on the command line.
-* `parserNumTasks` : The number of tasks for the parser bolt (default to `1`). If there are multiple sensors, the last one's configuration will be used. This can be overridden on the command line.
-* `errorWriterParallelism` : The error writer bolt parallelism (default to `1`). This can be overridden on the command line.
-* `errorWriterNumTasks` : The number of tasks for the error writer bolt (default to `1`). This can be overridden on the command line.
-* `numWorkers` : The number of workers to use in the topology (default is the storm default of `1`).
-* `numAckers` : The number of acker executors to use in the topology (default is the storm default of `1`).
-* `spoutConfig` : A map representing a custom spout config (this is a map). If there are multiple sensors, the configs will be merged with the last specified taking precedence. This can be overridden on the command line.
* `securityProtocol` : The security protocol to use for reading from kafka (this is a string). This can be overridden on the command line and also specified in the spout config via the `security.protocol` key. If both are specified, then they are merged and the CLI will take precedence. If multiple sensors are used, any non "PLAINTEXT" value will be used.
-* `stormConfig` : The storm config to use (this is a map). This can be overridden on the command line. If both are specified, they are merged with CLI properties taking precedence.
* `cacheConfig` : Cache config for stellar field transformations. This configures a least frequently used cache. This is a map with the following keys. If not explicitly configured (the default), then no cache will be used.
* `stellar.cache.maxSize` - The maximum number of elements in the cache. Default is to not use a cache.
* `stellar.cache.maxTimeRetain` - The maximum amount of time an element is kept in the cache (in minutes). Default is to not use a cache.
@@ -307,6 +290,9 @@ transformation which can be done to a message. This transformation can
* Add new fields given the values of existing fields of a message
* Remove existing fields of a message
+For platform specific configs, see the README of the appropriate project. This would include settings such as parallelism of individual components and general configuration.
+* [Storm](metron-parsing-storm/README.md#parser-configuration)
+
### Metadata
Metadata is a useful thing to send to Metron and use during enrichment or threat intelligence.
@@ -441,7 +427,7 @@ This transformation would transform `{ "protocol" : 6, "source.type" : "bro", ..
into `{ "protocol" : "TCP", "source.type" : "bro", ...}`
* `STELLAR` : This transformation executes a set of transformations
- expressed as [Stellar Language](../metron-common) statements.
+ expressed as [Stellar Language](../../metron-common) statements.
* `RENAME` : This transformation allows users to rename a set of fields. Specifically,
the config is presumed to be the mapping. The keys to the config are the existing field names
@@ -598,7 +584,7 @@ are defined in the Parser Config (defined above) JSON file in Zookeeper.
### Java Parser Adapters
Java parser adapters are intended for higher-velocity topologies and are not easily changed or extended. As the adoption of Metron continues we plan on extending our library of Java adapters to process more log formats. As of this moment the Java adapters included with Metron are:
-* org.apache.metron.parsers.ise.BasicIseParser : Parse ISE messages
+* BasicIseParser : Parse ISE messages
* org.apache.metron.parsers.bro.BasicBroParser : Parse Bro messages
* org.apache.metron.parsers.sourcefire.BasicSourcefireParser : Parse Sourcefire messages
* org.apache.metron.parsers.lancope.BasicLancopeParser : Parse Lancope messages
@@ -617,92 +603,17 @@ For more information on the Grok project please refer to the following link:
https://github.com/thekrakken/java-grok
-# Starting the Parser Topology
-
-Starting a particular parser topology on a running Metron deployment is
-as easy as running the `start_parser_topology.sh` script located in
-`$METRON_HOME/bin`. This utility will allow you to configure and start
-the running topology assuming that the sensor specific parser configuration
-exists within zookeeper.
-
-The usage for `start_parser_topology.sh` is as follows:
-
-```
-usage: start_parser_topology.sh
- -e,--extra_topology_options <JSON_FILE> Extra options in the form
- of a JSON file with a map
- for content.
- -esc,--extra_kafka_spout_config <JSON_FILE> Extra spout config options
- in the form of a JSON file
- with a map for content.
- Possible keys are:
- retryDelayMaxMs,retryDelay
- Multiplier,retryInitialDel
- ayMs,stateUpdateIntervalMs
- ,bufferSizeBytes,fetchMaxW
- ait,fetchSizeBytes,maxOffs
- etBehind,metricsTimeBucket
- SizeInSecs,socketTimeoutMs
- -ewnt,--error_writer_num_tasks <NUM_TASKS> Error Writer Num Tasks
- -ewp,--error_writer_p <PARALLELISM_HINT> Error Writer Parallelism
- Hint
- -h,--help This screen
- -iwnt,--invalid_writer_num_tasks <NUM_TASKS> Invalid Writer Num Tasks
- -iwp,--invalid_writer_p <PARALLELISM_HINT> Invalid Message Writer Parallelism Hint
- -k,--kafka <BROKER_URL> Kafka Broker URL
- -ksp,--kafka_security_protocol <SECURITY_PROTOCOL> Kafka Security Protocol
- -mt,--message_timeout <TIMEOUT_IN_SECS> Message Timeout in Seconds
- -mtp,--max_task_parallelism <MAX_TASK> Max task parallelism
- -na,--num_ackers <NUM_ACKERS> Number of Ackers
- -nw,--num_workers <NUM_WORKERS> Number of Workers
- -ot,--output_topic <KAFKA_TOPIC> Output Kafka Topic
- -pnt,--parser_num_tasks <NUM_TASKS> Parser Num Tasks
- -pp,--parser_p <PARALLELISM_HINT> Parser Parallelism Hint
- -s,--sensor <SENSOR_TYPE> Sensor Type
- -snt,--spout_num_tasks <NUM_TASKS> Spout Num Tasks
- -sp,--spout_p <SPOUT_PARALLELISM_HINT> Spout Parallelism Hint
- -t,--test <TEST> Run in Test Mode
- -z,--zk <ZK_QUORUM> Zookeeper Quroum URL
- (zk1:2181,zk2:2181,...
-```
-
-## The `--extra_kafka_spout_config` Option
-These options are intended to configure the Storm Kafka Spout more completely. These options can be
-specified in a JSON file containing a map associating the kafka spout configuration parameter to a value.
-The range of values possible to configure are:
-* `spout.pollTimeoutMs` - Specifies the time, in milliseconds, spent waiting in poll if data is not available. Default is 2s
-* `spout.firstPollOffsetStrategy` - Sets the offset used by the Kafka spout in the first poll to Kafka broker upon process start. One of
- * `EARLIEST`
- * `LATEST`
- * `UNCOMMITTED_EARLIEST` - Last uncommitted and if offsets aren't found, defaults to earliest. NOTE: This is the default.
- * `UNCOMMITTED_LATEST` - Last uncommitted and if offsets aren't found, defaults to latest.
-* `spout.offsetCommitPeriodMs` - Specifies the period, in milliseconds, the offset commit task is periodically called. Default is 15s.
-* `spout.maxUncommittedOffsets` - Defines the max number of polled offsets (records) that can be pending commit, before another poll can take place. Once this limit is reached, no more offsets (records) can be polled until the next successful commit(s) sets the number of pending offsets bellow the threshold. The default is 10,000,000.
-* `spout.maxRetries` - Defines the max number of retrials in case of tuple failure. The default is to retry forever, which means that no new records are committed until the previous polled records have been acked. This guarantees at once delivery of all the previously polled records. By specifying a finite value for maxRetries, the user decides to sacrifice guarantee of delivery for the previous polled records in favor of processing more records.
-* Any of the configs in the Consumer API for [Kafka 0.10.x](http://kafka.apache.org/0100/documentation.html#newconsumerconfigs)
-
-For instance, creating a JSON file which will set the offsets to `UNCOMMITTED_EARLIEST`
-```
-{
- "spout.firstPollOffsetStrategy" : "UNCOMMITTED_EARLIEST"
-}
-```
-
-This would be loaded by passing the file as argument to `--extra_kafka_spout_config`
+# Starting the Parser
-## The `--extra_topology_options` Option
+Starting a particular parser on a running Metron deployment is dependent on the platform being run on. Please see the appropriate platform-specific README.
+* [Storm](metron-parsing-storm/README.md#starting-the-parser-topology)
-These options are intended to be Storm configuration options and will live in
-a JSON file which will be loaded into the Storm config. For instance, if you wanted to set a storm property on
-the config called `topology.ticks.tuple.freq.secs` to 1000 and `storm.local.dir` to `/opt/my/path`
-you could create a file called `custom_config.json` containing
-```
-{
- "topology.ticks.tuple.freq.secs" : 1000,
- "storm.local.dir" : "/opt/my/path"
-}
-```
-and pass `--extra_topology_options custom_config.json` to `start_parser_topology.sh`.
+For all platforms, you will need to provide
+* Zookeeper Quorum
+* Kafka Broker URL
+* Sensor type
+* Output topic
+* Kakfa Security Protocol (Optional)
# Notes on Performance Tuning
@@ -711,13 +622,16 @@ are a few knobs to tune to get the most out of your system.
When using aggregated parsers, it's highly recommended to aggregate parsers with similar velocity and parser complexity together.
+Platform specific notes can be found in the appropriate README
+* [Storm](metron-parsing-storm/README.md)
+
# Notes on Adding a New Sensor
In order to allow for meta alerts to be queries alongside regular alerts in Elasticsearch 2.x,
it is necessary to add an additional field to the templates and mapping for existing sensors.
-Please see a description of the steps necessary to make this change in the metron-elasticsearch [Using Metron with Elasticsearch 2.x](../../metron-platform/metron-elasticsearch#using-metron-with-elasticsearch-2x)
+Please see a description of the steps necessary to make this change in the metron-elasticsearch [Using Metron with Elasticsearch 2.x](../../metron-elasticsearch#using-metron-with-elasticsearch-2x)
-If Solr is selected as the real-time store, it is also necessary to add additional fields. See the [Solr](../metron-indexing#solr) section in metron-indexing for more details.
+If Solr is selected as the real-time store, it is also necessary to add additional fields. See the [Solr](../../metron-indexing#solr) section in metron-indexing for more details.
## Kafka Queue
The kafka queue associated with your parser is a collection point for
@@ -725,28 +639,6 @@ all of the data sent to your parser. As such, make sure that the number of part
the kafka topic is sufficient to handle the throughput that you expect
from your parser topology.
-## Parser Topology
-The enrichment topology as started by the `$METRON_HOME/bin/start_parser_topology.sh`
-script uses a default of one executor per bolt. In a real production system, this should
-be customized by modifying the arguments sent to this utility.
-* Topology Wide
- * `--num_workers` : The number of workers for the topology
- * `--num_ackers` : The number of ackers for the topology
-* The Kafka Spout
- * `--spout_num_tasks` : The number of tasks for the spout
- * `--spout_p` : The parallelism hint for the spout
- * Ensure that the spout has enough parallelism so that it can dedicate a worker per partition in your kafka topic.
-* The Parser Bolt
- * `--parser_num_tasks` : The number of tasks for the parser bolt
- * `--parser_p` : The parallelism hint for the spout
- * This is bolt that gets the most processing, so ensure that it is configured with sufficient parallelism to match your throughput expectations.
-* The Error Message Writer Bolt
- * `--error_writer_num_tasks` : The number of tasks for the error writer bolt
- * `--error_writer_p` : The parallelism hint for the error writer bolt
-
-Finally, if workers and executors are new to you, the following might be of use to you:
-* [Understanding the Parallelism of a Storm Topology](http://www.michael-noll.com/blog/2012/10/16/understanding-the-parallelism-of-a-storm-topology/)
-
## JSON Path
> "JSONPath expressions always refer to a JSON structure in the same way as XPath expression are used in combination with an XML document."
diff --git a/metron-platform/metron-parsers/3rdPartyParser.md b/metron-platform/metron-parsing/metron-parsers-common/3rdPartyParser.md
similarity index 99%
rename from metron-platform/metron-parsers/3rdPartyParser.md
rename to metron-platform/metron-parsing/metron-parsers-common/3rdPartyParser.md
index 0c2409e9d7..04cbc73287 100644
--- a/metron-platform/metron-parsers/3rdPartyParser.md
+++ b/metron-platform/metron-parsing/metron-parsers-common/3rdPartyParser.md
@@ -87,7 +87,7 @@ up the maven project:
-->
<dependency>
<groupId>org.apache.metron</groupId>
- <artifactId>metron-parsers</artifactId>
+ <artifactId>metron-parsers-common</artifactId>
<version>${metron_version}</version>
<scope>provided</scope>
</dependency>
diff --git a/metron-platform/metron-parsers/ParserChaining.md b/metron-platform/metron-parsing/metron-parsers-common/ParserChaining.md
similarity index 97%
rename from metron-platform/metron-parsers/ParserChaining.md
rename to metron-platform/metron-parsing/metron-parsers-common/ParserChaining.md
index 4cab74c9f5..9f08adda9b 100644
--- a/metron-platform/metron-parsers/ParserChaining.md
+++ b/metron-platform/metron-parsing/metron-parsers-common/ParserChaining.md
@@ -31,7 +31,7 @@ Multi-pass parser involves the following requirements:
# High Level Solution
-
+
At a high level, we continue to maintain the architectural invariant of
a 1-1 relationship between logical sensors and storm topologies.
@@ -147,7 +147,7 @@ Together with routing, we have the complete solution to chain parsers which can:
Together this enables a directed acyclic graph of parsers to handle single or multi-layer parsing.
### Example
-For a complete example, look at the [parser chaining use-case](../../use-cases/parser_chaining), however for a simple example the following should suffice.
+For a complete example, look at the [parser chaining use-case](../../../use-cases/parser_chaining), however for a simple example the following should suffice.
If I want to configure a CSV parser to parse data which has 3 columns `f1`, `f2` and `f3` and is
held in a field called `payload` inside of a JSON Map, I can do so like
diff --git a/metron-platform/metron-parsing/metron-parsers-common/README.md b/metron-platform/metron-parsing/metron-parsers-common/README.md
new file mode 100644
index 0000000000..0c5cf23e80
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers-common/README.md
@@ -0,0 +1,27 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+-->
+# metron-parsers-common
+
+metron-parsers-common contains the necessary components to write and test MessageParsers, along with some of the supporting utilities. The most basic parsers for extensions are included.
+
+The included parsers are
+* Grok Parser
+* JSONMapParser
+* CSVParser
+
+More details on these parsers and the overall architecture can be found in the metron-parsing [README](..#README.md)
diff --git a/metron-platform/metron-parsers/message-parser-implementation-notes.md b/metron-platform/metron-parsing/metron-parsers-common/message-parser-implementation-notes.md
similarity index 100%
rename from metron-platform/metron-parsers/message-parser-implementation-notes.md
rename to metron-platform/metron-parsing/metron-parsers-common/message-parser-implementation-notes.md
diff --git a/metron-platform/metron-parsers/parser-testing.md b/metron-platform/metron-parsing/metron-parsers-common/parser-testing.md
similarity index 57%
rename from metron-platform/metron-parsers/parser-testing.md
rename to metron-platform/metron-parsing/metron-parsers-common/parser-testing.md
index 3d670b5782..29cfa8806a 100644
--- a/metron-platform/metron-parsers/parser-testing.md
+++ b/metron-platform/metron-parsing/metron-parsers-common/parser-testing.md
@@ -35,23 +35,15 @@ test that unit of functionality.
## The Integration Test
-Integration tests are more structured. The intent is that the parser that
-you have implemented can be driven successfully from `org.apache.metron.parsers.bolt.ParserBolt`.
+Integration tests are more structured. The intent is that the parser that you have implemented can be driven successfully from the appropriate driver, e.g. `org.apache.metron.parsers.bolt.ParserBolt` for Storm.
-The procedure for creating a new test is as follows:
-* Create an integration test that extends `org.apache.metron.parsers.integration.ParserIntegrationTest`
- * Override `getSensorType()` to return the sensor type to be used in the test (referred to as `${sensor_type}` at times)
- * Override `getValidations()` to indicate how you want the output of the parser to be validated (more on validations later)
- * Optionally `readSensorConfig(String sensorType)` to read the sensor config
- * By default, we will pull this from `metron-parsers/src/main/config/zookeeper/parsers/${sensor_type}`. Override if you want to provide your own
- * Optionally `readGlobalConfig()` to return the global config
- * By default, we will pull this from `metron-integration-test/src/main/config/zookeeper/global.json)`. Override if you want to provide your own
-* Place sample input data in `metron-integration-test/src/main/sample/data/${sensor_type}/raw`
- * It should be one line per input record.
-* Place expected output based on sample data in `metron-integration-test/src/main/sample/data/${sensor_type}/parsed`
- * Line `k` in the expected data should match with line `k`
+To add a new test, just add it to the list of sensorTypes in `org.apache.metron.parsers.integration.ParserIntegrationTest`.
-The way these tests function is by creating a `ParserBolt` instance with your specified global configuration and
+To setup the tests for a new platform, extend `ParserIntegrationTest`, e.g. as in `org.apache.metron.parsers.integration.StormParserIntegrationTests`. This should be a parameterized test, so that each sensorType gets its own test. Use `StormParserIntegrationTests` as a template for the new platform's class. The test method should just setup the appropriate `ParserDriver` implementation, and simply call back into the parent to run the test.
+
+Customized versions of the tests can be added by extending `ParserIntegrationTest` and performing additional setup or validations as needed.
+
+The way these tests function is by running the `ParserDriver` instance with your specified global configuration and
sensor configuration. It will then send your specified sample input data in line-by-line. It will then
perform some basic sanity validation:
* Ensure no errors were logged
@@ -66,22 +58,3 @@ conforms (excluding timestamp).
If you have special validations required, you may implement your own and return an instance of that in the `getValidations()`
method of your Integration Test.
-
-### Sample Integration Test
-
-A sample integration test for the `snort` parser is as follows:
-```
-public class SnortIntegrationTest extends ParserIntegrationTest {
- @Override
- String getSensorType() {
- return "snort";
- }
-
- @Override
- List<ParserValidation> getValidations() {
- return new ArrayList<ParserValidation>() {{
- add(new SampleDataValidation());
- }};
- }
-}
-```
diff --git a/metron-platform/metron-parsers/parser_arch.png b/metron-platform/metron-parsing/metron-parsers-common/parser_arch.png
similarity index 100%
rename from metron-platform/metron-parsers/parser_arch.png
rename to metron-platform/metron-parsing/metron-parsers-common/parser_arch.png
diff --git a/metron-platform/metron-parsers/pom.xml b/metron-platform/metron-parsing/metron-parsers-common/pom.xml
similarity index 86%
rename from metron-platform/metron-parsers/pom.xml
rename to metron-platform/metron-parsing/metron-parsers-common/pom.xml
index e4914b6426..617366aff2 100644
--- a/metron-platform/metron-parsers/pom.xml
+++ b/metron-platform/metron-parsing/metron-parsers-common/pom.xml
@@ -17,11 +17,12 @@
<modelVersion>4.0.0</modelVersion>
<parent>
<groupId>org.apache.metron</groupId>
- <artifactId>metron-platform</artifactId>
+ <artifactId>metron-parsing</artifactId>
<version>0.7.0</version>
</parent>
- <artifactId>metron-parsers</artifactId>
- <name>metron-parsers</name>
+ <artifactId>metron-parsers-common</artifactId>
+ <name>metron-parsers-common</name>
+ <description>Metron common code for building parsers</description>
<url>https://metron.apache.org/</url>
<properties>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
@@ -123,40 +124,6 @@
</exclusion>
</exclusions>
</dependency>
- <dependency>
- <groupId>org.apache.storm</groupId>
- <artifactId>storm-rename-hack</artifactId>
- <version>${global_storm_version}</version>
- <scope>provided</scope>
- </dependency>
- <dependency>
- <groupId>org.apache.storm</groupId>
- <artifactId>storm-core</artifactId>
- <version>${global_storm_version}</version>
- <scope>provided</scope>
- <exclusions>
- <exclusion>
- <groupId>org.apache.logging.log4j</groupId>
- <artifactId>log4j-api</artifactId>
- </exclusion>
- <exclusion>
- <groupId>org.apache.logging.log4j</groupId>
- <artifactId>log4j-core</artifactId>
- </exclusion>
- <exclusion>
- <artifactId>servlet-api</artifactId>
- <groupId>javax.servlet</groupId>
- </exclusion>
- <exclusion>
- <artifactId>log4j-over-slf4j</artifactId>
- <groupId>org.slf4j</groupId>
- </exclusion>
- <exclusion>
- <artifactId>log4j-slf4j-impl</artifactId>
- <groupId>org.apache.logging.log4j</groupId>
- </exclusion>
- </exclusions>
- </dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
@@ -175,11 +142,6 @@
<version>${global_junit_version}</version>
<scope>test</scope>
</dependency>
- <dependency>
- <groupId>com.google.guava</groupId>
- <artifactId>guava</artifactId>
- <version>${global_guava_version}</version>
- </dependency>
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
@@ -238,12 +200,6 @@
<artifactId>commons-cli</artifactId>
<version>1.2</version>
</dependency>
- <dependency>
- <groupId>org.apache.metron</groupId>
- <artifactId>metron-test-utilities</artifactId>
- <version>${project.parent.version}</version>
- <scope>test</scope>
- </dependency>
<dependency>
<groupId>org.apache.metron</groupId>
<artifactId>metron-integration-test</artifactId>
@@ -261,11 +217,6 @@
<artifactId>json-path</artifactId>
<version>2.3.0</version>
</dependency>
- <dependency>
- <groupId>com.github.palindromicity</groupId>
- <artifactId>simple-syslog-5424</artifactId>
- <version>${global_simple_syslog_version}</version>
- </dependency>
</dependencies>
<build>
<plugins>
@@ -320,8 +271,6 @@
</relocations>
<artifactSet>
<excludes>
- <exclude>storm:storm-core:*</exclude>
- <exclude>storm:storm-lib:*</exclude>
<exclude>org.slf4j.impl*</exclude>
<exclude>org.slf4j:slf4j-log4j*</exclude>
</excludes>
diff --git a/metron-platform/metron-parsers/src/main/assembly/assembly.xml b/metron-platform/metron-parsing/metron-parsers-common/src/main/assembly/assembly.xml
similarity index 100%
rename from metron-platform/metron-parsers/src/main/assembly/assembly.xml
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/assembly/assembly.xml
diff --git a/metron-platform/metron-parsers/src/main/config/zookeeper/parsers/jsonMap.json b/metron-platform/metron-parsing/metron-parsers-common/src/main/config/zookeeper/parsers/jsonMap.json
similarity index 100%
rename from metron-platform/metron-parsers/src/main/config/zookeeper/parsers/jsonMap.json
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/config/zookeeper/parsers/jsonMap.json
diff --git a/metron-platform/metron-parsers/src/main/config/zookeeper/parsers/jsonMapQuery.json b/metron-platform/metron-parsing/metron-parsers-common/src/main/config/zookeeper/parsers/jsonMapQuery.json
similarity index 100%
rename from metron-platform/metron-parsers/src/main/config/zookeeper/parsers/jsonMapQuery.json
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/config/zookeeper/parsers/jsonMapQuery.json
diff --git a/metron-platform/metron-parsers/src/main/config/zookeeper/parsers/jsonMapWrappedQuery.json b/metron-platform/metron-parsing/metron-parsers-common/src/main/config/zookeeper/parsers/jsonMapWrappedQuery.json
similarity index 100%
rename from metron-platform/metron-parsers/src/main/config/zookeeper/parsers/jsonMapWrappedQuery.json
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/config/zookeeper/parsers/jsonMapWrappedQuery.json
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/BasicParser.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/BasicParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/BasicParser.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/BasicParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/DefaultMessageParserResult.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/DefaultMessageParserResult.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/DefaultMessageParserResult.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/DefaultMessageParserResult.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/DefaultParserRunnerResults.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/DefaultParserRunnerResults.java
similarity index 99%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/DefaultParserRunnerResults.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/DefaultParserRunnerResults.java
index 79a9b5d9e6..4e9d6b7ce5 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/DefaultParserRunnerResults.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/DefaultParserRunnerResults.java
@@ -68,4 +68,4 @@ public int hashCode() {
result = 31 * result + (errors != null ? errors.hashCode() : 0);
return result;
}
-}
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/GrokParser.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/GrokParser.java
similarity index 99%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/GrokParser.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/GrokParser.java
index 6bdfb81cec..f64b4afabf 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/GrokParser.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/GrokParser.java
@@ -44,7 +44,6 @@
import java.text.ParseException;
import java.text.SimpleDateFormat;
import java.util.ArrayList;
-import java.util.Collections;
import java.util.Date;
import java.util.HashMap;
import java.util.List;
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ParseException.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParseException.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ParseException.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParseException.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/ParserComponent.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParserComponent.java
similarity index 97%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/ParserComponent.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParserComponent.java
index eb5ff9fbd1..c040acbd40 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/ParserComponent.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParserComponent.java
@@ -15,14 +15,13 @@
* See the License for the specific language governing permissions and
* limitations under the License.
*/
-package org.apache.metron.parsers.topology;
+package org.apache.metron.parsers;
+import java.io.Serializable;
import org.apache.metron.parsers.interfaces.MessageFilter;
import org.apache.metron.parsers.interfaces.MessageParser;
import org.json.simple.JSONObject;
-import java.io.Serializable;
-
public class ParserComponent implements Serializable {
private static final long serialVersionUID = 7880346740026374665L;
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ParserRunner.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParserRunner.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ParserRunner.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParserRunner.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ParserRunnerImpl.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParserRunnerImpl.java
similarity index 99%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ParserRunnerImpl.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParserRunnerImpl.java
index a986db7aa0..df3ed1ca75 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ParserRunnerImpl.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParserRunnerImpl.java
@@ -17,6 +17,20 @@
*/
package org.apache.metron.parsers;
+import java.io.Serializable;
+import java.lang.invoke.MethodHandles;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import java.util.Set;
+import java.util.UUID;
+import java.util.function.Consumer;
+import java.util.function.Supplier;
+import java.util.stream.Collectors;
import org.apache.commons.lang3.StringUtils;
import org.apache.metron.common.Constants;
import org.apache.metron.common.configuration.FieldTransformer;
@@ -30,27 +44,11 @@
import org.apache.metron.parsers.interfaces.MessageFilter;
import org.apache.metron.parsers.interfaces.MessageParser;
import org.apache.metron.parsers.interfaces.MessageParserResult;
-import org.apache.metron.parsers.topology.ParserComponent;
import org.apache.metron.stellar.dsl.Context;
import org.json.simple.JSONObject;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
-import java.io.Serializable;
-import java.lang.invoke.MethodHandles;
-import java.util.ArrayList;
-import java.util.Collections;
-import java.util.HashMap;
-import java.util.HashSet;
-import java.util.List;
-import java.util.Map;
-import java.util.Optional;
-import java.util.Set;
-import java.util.UUID;
-import java.util.function.Consumer;
-import java.util.function.Supplier;
-import java.util.stream.Collectors;
-
/**
* The default implemention of a ParserRunner.
*/
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ParserRunnerResults.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParserRunnerResults.java
similarity index 99%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ParserRunnerResults.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParserRunnerResults.java
index 7ca853c483..63abd0e21f 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ParserRunnerResults.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/ParserRunnerResults.java
@@ -30,4 +30,4 @@
List<T> getMessages();
List<MetronError> getErrors();
-}
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/csv/CSVParser.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/csv/CSVParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/csv/CSVParser.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/csv/CSVParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/filters/AbstractMessageFilter.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/filters/AbstractMessageFilter.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/filters/AbstractMessageFilter.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/filters/AbstractMessageFilter.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/filters/BroMessageFilter.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/filters/BroMessageFilter.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/filters/BroMessageFilter.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/filters/BroMessageFilter.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/filters/Filters.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/filters/Filters.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/filters/Filters.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/filters/Filters.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/filters/StellarFilter.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/filters/StellarFilter.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/filters/StellarFilter.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/filters/StellarFilter.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/Configurable.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/interfaces/Configurable.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/Configurable.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/interfaces/Configurable.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageFilter.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/interfaces/MessageFilter.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageFilter.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/interfaces/MessageFilter.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/interfaces/MessageParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParserResult.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/interfaces/MessageParserResult.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/interfaces/MessageParserResult.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/interfaces/MessageParserResult.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/json/JSONMapParser.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/json/JSONMapParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/json/JSONMapParser.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/json/JSONMapParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/utils/DateUtils.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/utils/DateUtils.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/utils/DateUtils.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/utils/DateUtils.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/utils/GrokUtils.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/utils/GrokUtils.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/utils/GrokUtils.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/utils/GrokUtils.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/utils/ParserUtils.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/utils/ParserUtils.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/utils/ParserUtils.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/utils/ParserUtils.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/utils/SyslogUtils.java b/metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/utils/SyslogUtils.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/utils/SyslogUtils.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/java/org/apache/metron/parsers/utils/SyslogUtils.java
diff --git a/metron-platform/metron-parsers/src/main/resources/META-INF/LICENSE b/metron-platform/metron-parsing/metron-parsers-common/src/main/resources/META-INF/LICENSE
similarity index 100%
rename from metron-platform/metron-parsers/src/main/resources/META-INF/LICENSE
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/resources/META-INF/LICENSE
diff --git a/metron-platform/metron-parsing/metron-parsers-common/src/main/resources/META-INF/NOTICE b/metron-platform/metron-parsing/metron-parsers-common/src/main/resources/META-INF/NOTICE
new file mode 100644
index 0000000000..456a20a877
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/main/resources/META-INF/NOTICE
@@ -0,0 +1,40 @@
+
+metron-parsers-common
+Copyright 2006-2016 The Apache Software Foundation
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
+
+This product includes software developed for Orekit by
+CS Systรจmes d'Information (http://www.c-s.fr/)
+Copyright 2010-2012 CS Systรจmes d'Information
+
+ The Netty Project
+ =================
+
+Please visit the Netty web site for more information:
+
+ * http://netty.io/
+
+Copyright 2011 The Netty Project
+
+This project contains annotations derived from JCIP-ANNOTATIONS
+Copyright (c) 2005 Brian Goetz and Tim Peierls. See http://www.jcip.net
+
+Objenesis
+Copyright 2006-2013 Joe Walnes, Henri Tremblay, Leonardo Mesquita
+
+Google Guice - Core Library
+Copyright 2006-2011 Google, Inc.
+
+Google Guice - Extensions - Servlet
+Copyright 2006-2011 Google, Inc.
+
+ Portions of this software were originally based on the following:
+ - software copyright (c) 1999, IBM Corporation., http://www.ibm.com.
+ - software copyright (c) 1999, Sun Microsystems., http://www.sun.com.
+ - voluntary contributions made by Paul Eng on behalf of the
+ Apache Software Foundation that were originally developed at iClick, Inc.,
+ software copyright (c) 1999.
+
+
diff --git a/metron-platform/metron-parsers/src/main/resources/patterns/common b/metron-platform/metron-parsing/metron-parsers-common/src/main/resources/patterns/common
similarity index 100%
rename from metron-platform/metron-parsers/src/main/resources/patterns/common
rename to metron-platform/metron-parsing/metron-parsers-common/src/main/resources/patterns/common
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/filters/FiltersTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/filters/FiltersTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/filters/FiltersTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/filters/FiltersTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/AbstractParserConfigTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/AbstractParserConfigTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/AbstractParserConfigTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/AbstractParserConfigTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/GrokParserTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/GrokParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/GrokParserTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/GrokParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/MessageParserTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/MessageParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/MessageParserTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/MessageParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/MultiLineGrokParserTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/MultiLineGrokParserTest.java
similarity index 98%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/MultiLineGrokParserTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/MultiLineGrokParserTest.java
index e24a39dd6a..8478bd480b 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/MultiLineGrokParserTest.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/MultiLineGrokParserTest.java
@@ -126,7 +126,7 @@ public Map getTestData() {
public String getMultiLine() { return "true";}
public String getGrokPath() {
- return "../metron-integration-test/src/main/sample/patterns/test";
+ return "../../metron-integration-test/src/main/sample/patterns/test";
}
public String getGrokPatternLabel() {
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/MultiLineWithErrorsGrokParserTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/MultiLineWithErrorsGrokParserTest.java
similarity index 98%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/MultiLineWithErrorsGrokParserTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/MultiLineWithErrorsGrokParserTest.java
index 8ab82464eb..4a235bfa4d 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/MultiLineWithErrorsGrokParserTest.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/MultiLineWithErrorsGrokParserTest.java
@@ -121,7 +121,7 @@ public Map getTestData() {
}
public String getGrokPath() {
- return "../metron-integration-test/src/main/sample/patterns/test";
+ return "../../metron-integration-test/src/main/sample/patterns/test";
}
public String getGrokPatternLabel() {
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/ParserRunnerImplTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/ParserRunnerImplTest.java
similarity index 99%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/ParserRunnerImplTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/ParserRunnerImplTest.java
index 5f05b24dd6..29a625d9c5 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/ParserRunnerImplTest.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/ParserRunnerImplTest.java
@@ -17,6 +17,23 @@
*/
package org.apache.metron.parsers;
+import static org.mockito.Matchers.any;
+import static org.mockito.Mockito.doReturn;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.spy;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.verifyNoMoreInteractions;
+import static org.powermock.api.mockito.PowerMockito.mockStatic;
+import static org.powermock.api.mockito.PowerMockito.when;
+
+import java.io.IOException;
+import java.util.Arrays;
+import java.util.Collections;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.Map;
+import java.util.Optional;
import org.adrianwalker.multilinestring.Multiline;
import org.apache.metron.common.Constants;
import org.apache.metron.common.configuration.ParserConfigurations;
@@ -25,13 +42,12 @@
import org.apache.metron.common.message.metadata.RawMessage;
import org.apache.metron.common.utils.JSONUtils;
import org.apache.metron.common.utils.ReflectionUtils;
+import org.apache.metron.parsers.ParserRunnerImpl.ProcessResult;
import org.apache.metron.parsers.filters.Filters;
import org.apache.metron.parsers.filters.StellarFilter;
import org.apache.metron.parsers.interfaces.MessageFilter;
import org.apache.metron.parsers.interfaces.MessageParser;
import org.apache.metron.parsers.interfaces.MessageParserResult;
-import org.apache.metron.parsers.topology.ParserComponent;
-import org.apache.metron.parsers.ParserRunnerImpl.ProcessResult;
import org.apache.metron.stellar.dsl.Context;
import org.json.simple.JSONObject;
import org.junit.Assert;
@@ -43,24 +59,6 @@
import org.powermock.core.classloader.annotations.PrepareForTest;
import org.powermock.modules.junit4.PowerMockRunner;
-import java.io.IOException;
-import java.util.Arrays;
-import java.util.Collections;
-import java.util.HashMap;
-import java.util.HashSet;
-import java.util.Map;
-import java.util.Optional;
-
-import static org.mockito.Matchers.any;
-import static org.mockito.Mockito.doReturn;
-import static org.mockito.Mockito.mock;
-import static org.mockito.Mockito.spy;
-import static org.mockito.Mockito.times;
-import static org.mockito.Mockito.verify;
-import static org.mockito.Mockito.verifyNoMoreInteractions;
-import static org.powermock.api.mockito.PowerMockito.mockStatic;
-import static org.powermock.api.mockito.PowerMockito.when;
-
@RunWith(PowerMockRunner.class)
@PrepareForTest({ParserRunnerImpl.class, ReflectionUtils.class, Filters.class})
public class ParserRunnerImplTest {
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/SampleGrokParserTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/SampleGrokParserTest.java
similarity index 97%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/SampleGrokParserTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/SampleGrokParserTest.java
index 35e07f8cca..23ef72d1b6 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/SampleGrokParserTest.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/SampleGrokParserTest.java
@@ -73,7 +73,7 @@ public Map getTestData() {
@Override
public String getGrokPath() {
- return "../metron-integration-test/src/main/sample/patterns/test";
+ return "../../metron-integration-test/src/main/sample/patterns/test";
}
@Override
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/csv/CSVParserTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/csv/CSVParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/csv/CSVParserTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/csv/CSVParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/EnvelopedParserIntegrationTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/EnvelopedParserIntegrationTest.java
similarity index 79%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/EnvelopedParserIntegrationTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/EnvelopedParserIntegrationTest.java
index c0174158aa..3044061779 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/EnvelopedParserIntegrationTest.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/EnvelopedParserIntegrationTest.java
@@ -18,20 +18,19 @@
package org.apache.metron.parsers.integration;
import com.google.common.collect.ImmutableList;
+import java.io.IOException;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
import org.adrianwalker.multilinestring.Multiline;
import org.apache.metron.common.Constants;
import org.apache.metron.common.message.metadata.MetadataUtil;
import org.apache.metron.common.utils.JSONUtils;
import org.apache.metron.integration.ProcessorResult;
+import org.apache.metron.parsers.integration.validation.ParserDriver;
import org.junit.Assert;
-import org.junit.Test;
-
-import java.io.IOException;
-import java.util.HashMap;
-import java.util.List;
-import java.util.Map;
-public class EnvelopedParserIntegrationTest {
+public abstract class EnvelopedParserIntegrationTest {
/**
* {
@@ -52,9 +51,7 @@
@Multiline
public static String parserConfig_default;
- @Test
- public void testEnvelopedData() throws IOException {
- ParserDriver driver = new ParserDriver("test", parserConfig_default, "{}");
+ public void testEnvelopedData(ParserDriver driver) throws IOException {
Map<String, Object> inputRecord = new HashMap<String, Object>() {{
put(Constants.Fields.ORIGINAL.getName(), "real_original_string");
put("data", "field1_val,100");
@@ -91,9 +88,7 @@ public void testEnvelopedData() throws IOException {
@Multiline
public static String parserConfig_withPrefix;
- @Test
- public void testEnvelopedData_withMetadataPrefix() throws IOException {
- ParserDriver driver = new ParserDriver("test", parserConfig_withPrefix, "{}");
+ public void testEnvelopedData_withMetadataPrefix(ParserDriver driver) throws IOException {
Map<String, Object> inputRecord = new HashMap<String, Object>() {{
put(Constants.Fields.ORIGINAL.getName(), "real_original_string");
put("data", "field1_val,100");
@@ -129,9 +124,7 @@ public void testEnvelopedData_withMetadataPrefix() throws IOException {
@Multiline
public static String parserConfig_nomerge;
- @Test
- public void testEnvelopedData_noMergeMetadata() throws IOException {
- ParserDriver driver = new ParserDriver("test", parserConfig_nomerge, "{}");
+ public void testEnvelopedData_noMergeMetadata(ParserDriver driver) throws IOException {
Map<String, Object> inputRecord = new HashMap<String, Object>() {{
put(Constants.Fields.ORIGINAL.getName(), "real_original_string");
put("data", "field1_val,100");
@@ -182,28 +175,20 @@ public void testEnvelopedData_noMergeMetadata() throws IOException {
@Multiline
public static String cisco302020Config;
- @Test
- public void testCiscoPixEnvelopingCisco302020() throws Exception {
+ public void testCiscoPixEnvelopingCisco302020(ParserDriver syslogDriver, ParserDriver driver)
+ throws Exception {
byte[] envelopedData = null;
- {
- ParserDriver driver = new ParserDriver("ciscoPix", ciscoPixSyslogConfig, "{}");
- String inputRecord = "Mar 29 2004 09:54:18: %PIX-6-302005: Built UDP connection for faddr 198.207.223.240/53337 gaddr 10.0.0.187/53 laddr 192.168.0.2/53";
- ProcessorResult<List<byte[]>> results = driver.run(ImmutableList.of(inputRecord.getBytes()));
- Assert.assertFalse(results.failed());
- List<byte[]> resultList = results.getResult();
- envelopedData = resultList.get(0);
- }
- {
- ParserDriver driver = new ParserDriver("cisco302020", cisco302020Config, "{}");
- ProcessorResult<List<byte[]>> results = driver.run(ImmutableList.of(envelopedData));
- Assert.assertFalse(results.failed());
- List<byte[]> resultList = results.getResult();
- Assert.assertEquals(1, resultList.size());
- Map<String, Object> result = JSONUtils.INSTANCE.load(new String(resultList.get(0)), JSONUtils.MAP_SUPPLIER);
- Assert.assertEquals("UDP", result.get("protocol"));
- Assert.assertTrue((long)result.get("timestamp") > 1000 );
- }
-
+ String inputRecord = "Mar 29 2004 09:54:18: %PIX-6-302005: Built UDP connection for faddr 198.207.223.240/53337 gaddr 10.0.0.187/53 laddr 192.168.0.2/53";
+ ProcessorResult<List<byte[]>> syslogResult = syslogDriver.run(ImmutableList.of(inputRecord.getBytes()));
+ Assert.assertFalse(syslogResult.failed());
+ List<byte[]> syslogResultList = syslogResult.getResult();
+ envelopedData = syslogResultList.get(0);
+ ProcessorResult<List<byte[]>> results = driver.run(ImmutableList.of(envelopedData));
+ Assert.assertFalse(results.failed());
+ List<byte[]> resultList = results.getResult();
+ Assert.assertEquals(1, resultList.size());
+ Map<String, Object> result = JSONUtils.INSTANCE.load(new String(resultList.get(0)), JSONUtils.MAP_SUPPLIER);
+ Assert.assertEquals("UDP", result.get("protocol"));
+ Assert.assertTrue((long) result.get("timestamp") > 1000);
}
-
}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/ParserIntegrationTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/ParserIntegrationTest.java
similarity index 71%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/ParserIntegrationTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/ParserIntegrationTest.java
index 6b00a2b4a4..de0b984b5b 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/ParserIntegrationTest.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/ParserIntegrationTest.java
@@ -17,39 +17,60 @@
*/
package org.apache.metron.parsers.integration;
+import java.io.File;
+import java.io.IOException;
+import java.nio.file.Files;
+import java.util.Arrays;
+import java.util.List;
import org.apache.metron.TestConstants;
import org.apache.metron.integration.BaseIntegrationTest;
import org.apache.metron.integration.ProcessorResult;
import org.apache.metron.integration.utils.TestUtils;
+import org.apache.metron.parsers.integration.validation.ParserDriver;
import org.apache.metron.test.TestDataType;
import org.apache.metron.test.utils.SampleDataUtils;
import org.junit.Assert;
-import org.junit.Test;
-
-import java.io.File;
-import java.io.IOException;
-import java.nio.file.Files;
-import java.util.List;
public abstract class ParserIntegrationTest extends BaseIntegrationTest {
+ // Contains the list of sensor types to be tested.
+ // See StormParserIntegrationTest for an example of how to use this in a Parameterized JUnit test
+ protected static List<String> sensorTypes = Arrays.asList(
+ "asa",
+ "bro",
+ "jsonMap",
+ "jsonMapQuery",
+ "jsonMapWrappedQuery",
+ "snort",
+ "squid",
+ "websphere",
+ "yaf",
+ "syslog5424"
+ );
+
protected List<byte[]> inputMessages;
protected String readGlobalConfig() throws IOException {
- File configsRoot = new File(TestConstants.SAMPLE_CONFIG_PATH);
+ File configsRoot = new File("../" + TestConstants.SAMPLE_CONFIG_PATH);
return new String(Files.readAllBytes(new File(configsRoot, "global.json").toPath()));
}
protected String readSensorConfig(String sensorType) throws IOException {
- File configsRoot = new File(TestConstants.PARSER_CONFIGS_PATH);
+ // First check the basic parsers dir.
+ File configsRoot = new File("../" + TestConstants.PARSER_COMMON_CONFIGS_PATH);
File parsersRoot = new File(configsRoot, "parsers");
+ System.out.println("Workspace: " + System.getProperty("user.dir"));
+ System.out.println("Parsers root: " + parsersRoot);
+ if (!Files.exists(new File(parsersRoot, sensorType + ".json").toPath())) {
+ // Use the main parsers configs
+ configsRoot = new File("../" + TestConstants.PARSER_CONFIGS_PATH);
+ parsersRoot = new File(configsRoot, "parsers");
+ }
return new String(Files.readAllBytes(new File(parsersRoot, sensorType + ".json").toPath()));
}
- @Test
- public void test() throws Exception {
- String sensorType = getSensorType();
- ParserDriver driver = new ParserDriver(sensorType, readSensorConfig(sensorType), readGlobalConfig());
- inputMessages = TestUtils.readSampleData(SampleDataUtils.getSampleDataPath(sensorType, TestDataType.RAW));
+ public void runTest(ParserDriver driver) throws Exception {
+ String sensorType = driver.getSensorType();
+ inputMessages = TestUtils.readSampleData(SampleDataUtils.getSampleDataPath("..", sensorType, TestDataType.RAW));
ProcessorResult<List<byte[]>> result = driver.run(inputMessages);
List<byte[]> outputMessages = result.getResult();
@@ -80,7 +101,5 @@ public void dumpParsedMessages(List<byte[]> outputMessages, StringBuffer buffer)
}
}
- abstract String getSensorType();
abstract List<ParserValidation> getValidations();
-
}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/ParserValidation.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/ParserValidation.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/ParserValidation.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/ParserValidation.java
diff --git a/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/validation/ParserDriver.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/validation/ParserDriver.java
new file mode 100644
index 0000000000..48544298f7
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/validation/ParserDriver.java
@@ -0,0 +1,60 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.apache.metron.parsers.integration.validation;
+
+import java.io.IOException;
+import java.io.Serializable;
+import java.util.HashSet;
+import java.util.List;
+import org.apache.metron.common.configuration.ParserConfigurations;
+import org.apache.metron.common.configuration.SensorParserConfig;
+import org.apache.metron.common.utils.JSONUtils;
+import org.apache.metron.integration.ProcessorResult;
+import org.apache.metron.parsers.ParserRunner;
+import org.apache.metron.parsers.ParserRunnerImpl;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+public abstract class ParserDriver implements Serializable {
+
+ private static final Logger LOG = LoggerFactory.getLogger(ParserDriver.class);
+
+ protected ParserConfigurations config;
+ protected String sensorType;
+ protected ParserRunner parserRunner;
+
+ public ParserDriver(String sensorType, String parserConfig, String globalConfig)
+ throws IOException {
+ SensorParserConfig sensorParserConfig = SensorParserConfig.fromBytes(parserConfig.getBytes());
+ this.sensorType = sensorType == null ? sensorParserConfig.getSensorTopic() : sensorType;
+ config = new ParserConfigurations();
+ config.updateSensorParserConfig(this.sensorType,
+ SensorParserConfig.fromBytes(parserConfig.getBytes()));
+ config.updateGlobalConfig(JSONUtils.INSTANCE.load(globalConfig, JSONUtils.MAP_SUPPLIER));
+
+ parserRunner = new ParserRunnerImpl(new HashSet<String>() {{
+ add(sensorType);
+ }});
+ }
+
+ abstract public ProcessorResult<List<byte[]>> run(Iterable<byte[]> in);
+
+ public String getSensorType() {
+ return sensorType;
+ }
+}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/validation/SampleDataValidation.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/validation/SampleDataValidation.java
similarity index 96%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/validation/SampleDataValidation.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/validation/SampleDataValidation.java
index 1dff22f7c8..adc246d934 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/validation/SampleDataValidation.java
+++ b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/integration/validation/SampleDataValidation.java
@@ -35,7 +35,7 @@ public String getName() {
@Override
public void validate(String sensorType, List<byte[]> actualMessages) throws Exception {
- List<byte[]> expectedMessages = TestUtils.readSampleData(SampleDataUtils.getSampleDataPath(sensorType, TestDataType.PARSED));
+ List<byte[]> expectedMessages = TestUtils.readSampleData(SampleDataUtils.getSampleDataPath("..", sensorType, TestDataType.PARSED));
Assert.assertEquals(expectedMessages.size(), actualMessages.size());
for (int i = 0; i < actualMessages.size(); i++) {
String expectedMessage = new String(expectedMessages.get(i));
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/json/JSONMapParserQueryTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/json/JSONMapParserQueryTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/json/JSONMapParserQueryTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/json/JSONMapParserQueryTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/json/JSONMapParserTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/json/JSONMapParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/json/JSONMapParserTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/json/JSONMapParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/json/JSONMapParserWrappedQueryTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/json/JSONMapParserWrappedQueryTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/json/JSONMapParserWrappedQueryTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/json/JSONMapParserWrappedQueryTest.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/paloalto/README.md b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/paloalto/README.md
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/paloalto/README.md
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/paloalto/README.md
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/regex/RegularExpressionsParser.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/regex/RegularExpressionsParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/regex/RegularExpressionsParser.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/regex/RegularExpressionsParser.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/regex/RegularExpressionsParserTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/regex/RegularExpressionsParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/regex/RegularExpressionsParserTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/regex/RegularExpressionsParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/utils/ParserUtilsTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/utils/ParserUtilsTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/utils/ParserUtilsTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/utils/ParserUtilsTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/utils/SyslogUtilsTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/utils/SyslogUtilsTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/utils/SyslogUtilsTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/parsers/utils/SyslogUtilsTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/writers/SimpleHBaseEnrichmentWriterTest.java b/metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/writers/SimpleHBaseEnrichmentWriterTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/writers/SimpleHBaseEnrichmentWriterTest.java
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/java/org/apache/metron/writers/SimpleHBaseEnrichmentWriterTest.java
diff --git a/metron-platform/metron-parsers/src/test/resources/TestSchemas/BroSchema.json b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/TestSchemas/BroSchema.json
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/TestSchemas/BroSchema.json
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/TestSchemas/BroSchema.json
diff --git a/metron-platform/metron-parsers/src/test/resources/TestSchemas/IseSchema.json b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/TestSchemas/IseSchema.json
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/TestSchemas/IseSchema.json
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/TestSchemas/IseSchema.json
diff --git a/metron-platform/metron-parsers/src/test/resources/TestSchemas/LancopeSchema.json b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/TestSchemas/LancopeSchema.json
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/TestSchemas/LancopeSchema.json
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/TestSchemas/LancopeSchema.json
diff --git a/metron-platform/metron-parsers/src/test/resources/TestSchemas/PcapSchema.json b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/TestSchemas/PcapSchema.json
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/TestSchemas/PcapSchema.json
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/TestSchemas/PcapSchema.json
diff --git a/metron-platform/metron-parsers/src/test/resources/TestSchemas/SourcefireSchema.json b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/TestSchemas/SourcefireSchema.json
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/TestSchemas/SourcefireSchema.json
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/TestSchemas/SourcefireSchema.json
diff --git a/metron-platform/metron-parsers/src/test/resources/config/BasicFireEyeParserTest.config b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BasicFireEyeParserTest.config
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/config/BasicFireEyeParserTest.config
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BasicFireEyeParserTest.config
diff --git a/metron-platform/metron-parsers/src/test/resources/config/BasicIseParserTest.config b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BasicIseParserTest.config
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/config/BasicIseParserTest.config
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BasicIseParserTest.config
diff --git a/metron-platform/metron-parsers/src/test/resources/config/BasicLancopeParserTest.config b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BasicLancopeParserTest.config
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/config/BasicLancopeParserTest.config
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BasicLancopeParserTest.config
diff --git a/metron-platform/metron-parsers/src/test/resources/config/BasicPaloAltoFirewallParserTest.config b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BasicPaloAltoFirewallParserTest.config
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/config/BasicPaloAltoFirewallParserTest.config
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BasicPaloAltoFirewallParserTest.config
diff --git a/metron-platform/metron-parsers/src/test/resources/config/BasicSourcefireParserTest.config b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BasicSourcefireParserTest.config
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/config/BasicSourcefireParserTest.config
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BasicSourcefireParserTest.config
diff --git a/metron-platform/metron-parsers/src/test/resources/config/BroParserTest.config b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BroParserTest.config
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/config/BroParserTest.config
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/config/BroParserTest.config
diff --git a/metron-platform/metron-parsers/src/test/resources/logData/FireEyeParserTest.txt b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/FireEyeParserTest.txt
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/logData/FireEyeParserTest.txt
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/FireEyeParserTest.txt
diff --git a/metron-platform/metron-parsers/src/test/resources/logData/IseParserTest.txt b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/IseParserTest.txt
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/logData/IseParserTest.txt
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/IseParserTest.txt
diff --git a/metron-platform/metron-parsers/src/test/resources/logData/LancopeParserTest.txt b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/LancopeParserTest.txt
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/logData/LancopeParserTest.txt
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/LancopeParserTest.txt
diff --git a/metron-platform/metron-parsers/src/test/resources/logData/SourcefireParserTest.txt b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/SourcefireParserTest.txt
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/logData/SourcefireParserTest.txt
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/SourcefireParserTest.txt
diff --git a/metron-platform/metron-parsers/src/test/resources/logData/multi_elb_log.txt b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/multi_elb_log.txt
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/logData/multi_elb_log.txt
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/multi_elb_log.txt
diff --git a/metron-platform/metron-parsers/src/test/resources/logData/multi_elb_with_errors_log.txt b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/multi_elb_with_errors_log.txt
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/logData/multi_elb_with_errors_log.txt
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/logData/multi_elb_with_errors_log.txt
diff --git a/metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/adallom.cef b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/adallom.cef
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/adallom.cef
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/adallom.cef
diff --git a/metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/adallom.schema b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/adallom.schema
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/adallom.schema
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/adallom.schema
diff --git a/metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.cef b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/cyberark.cef
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.cef
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/cyberark.cef
diff --git a/metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.json b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/cyberark.json
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.json
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/cyberark.json
diff --git a/metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.schema b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/cyberark.schema
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.schema
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/cyberark.schema
diff --git a/metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/palo.cef b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/palo.cef
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/palo.cef
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/palo.cef
diff --git a/metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/palo.schema b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/palo.schema
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/palo.schema
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/palo.schema
diff --git a/metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/waf.cef b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/waf.cef
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/waf.cef
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/waf.cef
diff --git a/metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/waf.schema b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/waf.schema
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/waf.schema
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/org/apache/metron/parsers/cef/waf.schema
diff --git a/metron-platform/metron-parsers/src/test/resources/patterns/cisco_patterns b/metron-platform/metron-parsing/metron-parsers-common/src/test/resources/patterns/cisco_patterns
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/patterns/cisco_patterns
rename to metron-platform/metron-parsing/metron-parsers-common/src/test/resources/patterns/cisco_patterns
diff --git a/metron-platform/metron-parsing/metron-parsers/README.md b/metron-platform/metron-parsing/metron-parsers/README.md
new file mode 100644
index 0000000000..98e009455f
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/README.md
@@ -0,0 +1,37 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+-->
+# metron-parsers
+
+metron-parsers contains the included parsers that aren't our basic parsers.
+
+The included parsers are:
+* Asa
+* CEF
+* FireEye
+* ISE
+* Lancope
+* Logstash
+* PaloAlto
+* Snort
+* Sourcefire
+* Syslog
+* Websphere
+
+The basic parsers and their details can be found at [README](../metron-parsers-common#README.md).
+
+More details on these parsers and the overall architecture can be found in the metron-parsing [README](..#README.md).
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/pom.xml b/metron-platform/metron-parsing/metron-parsers/pom.xml
new file mode 100644
index 0000000000..d8b68256b0
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/pom.xml
@@ -0,0 +1,218 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+ Licensed to the Apache Software
+ Foundation (ASF) under one or more contributor license agreements. See the
+ NOTICE file distributed with this work for additional information regarding
+ copyright ownership. The ASF licenses this file to You under the Apache License,
+ Version 2.0 (the "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing, software distributed
+ under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
+ OR CONDITIONS OF ANY KIND, either express or implied. See the License for
+ the specific language governing permissions and limitations under the License.
+ -->
+
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+ <modelVersion>4.0.0</modelVersion>
+ <parent>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-parsing</artifactId>
+ <version>0.7.0</version>
+ </parent>
+ <artifactId>metron-parsers</artifactId>
+ <name>metron-parsers</name>
+ <description>Metron bundled parsers</description>
+ <url>https://metron.apache.org/</url>
+ <properties>
+ <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+ <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
+ </properties>
+ <dependencies>
+ <!-- Metron Dependencies -->
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-parsers-common</artifactId>
+ <version>${project.parent.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-common</artifactId>
+ <version>${project.parent.version}</version>
+ </dependency>
+
+ <!-- 3rd party dependencies -->
+ <dependency>
+ <groupId>com.google.guava</groupId>
+ <artifactId>guava</artifactId>
+ <version>${global_guava_version}</version>
+ </dependency>
+ <dependency>
+ <groupId>io.thekraken</groupId>
+ <artifactId>grok</artifactId>
+ <version>0.1.0</version>
+ <exclusions>
+ <exclusion>
+ <artifactId>slf4j-log4j12</artifactId>
+ <groupId>org.slf4j</groupId>
+ </exclusion>
+ <exclusion>
+ <artifactId>commons-lang3</artifactId>
+ <groupId>org.apache.commons</groupId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+ <dependency>
+ <groupId>com.github.palindromicity</groupId>
+ <artifactId>simple-syslog-5424</artifactId>
+ <version>${global_simple_syslog_version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-parsers-common</artifactId>
+ <version>${project.parent.version}</version>
+ <scope>compile</scope>
+ </dependency>
+
+ <!-- Test dependencies -->
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-parsers-common</artifactId>
+ <version>${project.parent.version}</version>
+ <classifier>tests</classifier>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-test-utilities</artifactId>
+ <version>${project.parent.version}</version>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>com.github.fge</groupId>
+ <artifactId>json-schema-validator</artifactId>
+ <version>2.2.6</version>
+ <scope>test</scope>
+ </dependency>
+ </dependencies>
+ <build>
+ <plugins>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-jar-plugin</artifactId>
+ <version>${global_jar_version}</version>
+ <executions>
+ <execution>
+ <goals>
+ <goal>test-jar</goal>
+ </goals>
+ </execution>
+ </executions>
+ </plugin>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-shade-plugin</artifactId>
+ <version>${global_shade_version}</version>
+ <configuration>
+ <createDependencyReducedPom>true</createDependencyReducedPom>
+ <artifactSet>
+ <excludes>
+ <exclude>*slf4j*</exclude>
+ </excludes>
+ </artifactSet>
+ </configuration>
+ <executions>
+ <execution>
+ <phase>package</phase>
+ <goals>
+ <goal>shade</goal>
+ </goals>
+ <configuration>
+ <shadedArtifactAttached>true</shadedArtifactAttached>
+ <shadedClassifierName>uber</shadedClassifierName>
+ <filters>
+ <filter>
+ <artifact>*:*</artifact>
+ <excludes>
+ <exclude>META-INF/*.SF</exclude>
+ <exclude>META-INF/*.DSA</exclude>
+ <exclude>META-INF/*.RSA</exclude>
+ </excludes>
+ </filter>
+ </filters>
+ <relocations>
+ <relocation>
+ <pattern>com.fasterxml.jackson</pattern>
+ <shadedPattern>org.apache.metron.jackson</shadedPattern>
+ </relocation>
+ </relocations>
+ <artifactSet>
+ <excludes>
+ <exclude>org.slf4j.impl*</exclude>
+ <exclude>org.slf4j:slf4j-log4j*</exclude>
+ </excludes>
+ </artifactSet>
+ <transformers>
+ <transformer implementation="org.atteo.classindex.ClassIndexTransformer"/>
+ <transformer
+ implementation="org.apache.maven.plugins.shade.resource.DontIncludeResourceTransformer">
+ <resources>
+ <resource>.yaml</resource>
+ <resource>LICENSE.txt</resource>
+ <resource>ASL2.0</resource>
+ <resource>NOTICE.txt</resource>
+ </resources>
+ </transformer>
+ <!-- UNCOMMENT THIS IF YOU NEED TO REGENERATE THE BEST GUESS NOTICES FILE WHICH REQUIRES PRUNING EVERY RELEASE -->
+ <!--transformer implementation="org.apache.maven.plugins.shade.resource.ApacheNoticeResourceTransformer">
+ <addHeader>false</addHeader>
+ <projectName>${project.name}</projectName>
+ </transformer-->
+ <transformer
+ implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer"/>
+ <transformer
+ implementation="org.apache.maven.plugins.shade.resource.ManifestResourceTransformer">
+ <mainClass></mainClass>
+ </transformer>
+ </transformers>
+ </configuration>
+ </execution>
+ </executions>
+ <dependencies>
+ <dependency>
+ <groupId>org.atteo.classindex</groupId>
+ <artifactId>classindex-transformer</artifactId>
+ <version>${global_classindex_version}</version>
+ </dependency>
+ </dependencies>
+ </plugin>
+ <plugin>
+ <artifactId>maven-assembly-plugin</artifactId>
+ <configuration>
+ <descriptor>src/main/assembly/assembly.xml</descriptor>
+ </configuration>
+ <executions>
+ <execution>
+ <id>make-assembly</id> <!-- this is used for inheritance merges -->
+ <phase>package</phase> <!-- bind to the packaging phase -->
+ <goals>
+ <goal>single</goal>
+ </goals>
+ </execution>
+ </executions>
+ </plugin>
+ </plugins>
+ <resources>
+ <resource>
+ <directory>src/main/resources</directory>
+ </resource>
+ <resource>
+ <directory>src/main/patterns</directory>
+ </resource>
+ <resource>
+ <directory>src/test/resources</directory>
+ </resource>
+ </resources>
+ </build>
+</project>
diff --git a/metron-platform/metron-parsing/metron-parsers/src/main/assembly/assembly.xml b/metron-platform/metron-parsing/metron-parsers/src/main/assembly/assembly.xml
new file mode 100644
index 0000000000..bad1f00fff
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/main/assembly/assembly.xml
@@ -0,0 +1,65 @@
+<!--
+ Licensed to the Apache Software
+ Foundation (ASF) under one or more contributor license agreements. See the
+ NOTICE file distributed with this work for additional information regarding
+ copyright ownership. The ASF licenses this file to You under the Apache License,
+ Version 2.0 (the "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing, software distributed
+ under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
+ OR CONDITIONS OF ANY KIND, either express or implied. See the License for
+ the specific language governing permissions and limitations under the License.
+ -->
+
+<assembly>
+ <id>archive</id>
+ <formats>
+ <format>tar.gz</format>
+ </formats>
+ <includeBaseDirectory>false</includeBaseDirectory>
+ <fileSets>
+ <fileSet>
+ <directory>${project.basedir}/src/main/config</directory>
+ <outputDirectory>config</outputDirectory>
+ <useDefaultExcludes>true</useDefaultExcludes>
+ <excludes>
+ <exclude>**/*.formatted</exclude>
+ <exclude>**/*.filtered</exclude>
+ </excludes>
+ <fileMode>0644</fileMode>
+ <lineEnding>unix</lineEnding>
+ <filtered>true</filtered>
+ </fileSet>
+ <fileSet>
+ <directory>${project.basedir}/src/main/resources/patterns</directory>
+ <outputDirectory>patterns</outputDirectory>
+ <useDefaultExcludes>true</useDefaultExcludes>
+ <excludes>
+ <exclude>**/*.formatted</exclude>
+ <exclude>**/*.filtered</exclude>
+ </excludes>
+ <fileMode>0644</fileMode>
+ <lineEnding>unix</lineEnding>
+ </fileSet>
+ <fileSet>
+ <directory>${project.basedir}/src/main/scripts</directory>
+ <outputDirectory>bin</outputDirectory>
+ <useDefaultExcludes>true</useDefaultExcludes>
+ <excludes>
+ <exclude>**/*.formatted</exclude>
+ <exclude>**/*.filtered</exclude>
+ </excludes>
+ <fileMode>0755</fileMode>
+ <lineEnding>unix</lineEnding>
+ <filtered>true</filtered>
+ </fileSet>
+ <fileSet>
+ <directory>${project.basedir}/target</directory>
+ <includes>
+ <include>${project.artifactId}-${project.version}-uber.jar</include>
+ </includes>
+ <outputDirectory>lib</outputDirectory>
+ <useDefaultExcludes>true</useDefaultExcludes>
+ </fileSet>
+ </fileSets>
+</assembly>
diff --git a/metron-platform/metron-parsers/src/main/config/zookeeper/parsers/asa.json b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/asa.json
similarity index 100%
rename from metron-platform/metron-parsers/src/main/config/zookeeper/parsers/asa.json
rename to metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/asa.json
diff --git a/metron-platform/metron-parsers/src/main/config/zookeeper/parsers/bro.json b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/bro.json
similarity index 100%
rename from metron-platform/metron-parsers/src/main/config/zookeeper/parsers/bro.json
rename to metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/bro.json
diff --git a/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/jsonMap.json b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/jsonMap.json
new file mode 100644
index 0000000000..39e1da9200
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/jsonMap.json
@@ -0,0 +1,4 @@
+{
+ "parserClassName":"org.apache.metron.parsers.json.JSONMapParser",
+ "sensorTopic":"jsonMap"
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/jsonMapQuery.json b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/jsonMapQuery.json
new file mode 100644
index 0000000000..7dad779f2f
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/jsonMapQuery.json
@@ -0,0 +1,5 @@
+{
+ "parserClassName":"org.apache.metron.parsers.json.JSONMapParser",
+ "sensorTopic":"jsonMapQuery",
+ "parserConfig": {"jsonpQuery":"$.foo"}
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/jsonMapWrappedQuery.json b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/jsonMapWrappedQuery.json
new file mode 100644
index 0000000000..3e960e03f1
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/jsonMapWrappedQuery.json
@@ -0,0 +1,5 @@
+{
+ "parserClassName":"org.apache.metron.parsers.json.JSONMapParser",
+ "sensorTopic":"jsonMapWrappedQuery",
+ "parserConfig": {"jsonpQuery":"$.foo","wrapInEntityArray":"true","wrapEntityName":"foo"}
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsers/src/main/config/zookeeper/parsers/snort.json b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/snort.json
similarity index 100%
rename from metron-platform/metron-parsers/src/main/config/zookeeper/parsers/snort.json
rename to metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/snort.json
diff --git a/metron-platform/metron-parsers/src/main/config/zookeeper/parsers/squid.json b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/squid.json
similarity index 100%
rename from metron-platform/metron-parsers/src/main/config/zookeeper/parsers/squid.json
rename to metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/squid.json
diff --git a/metron-platform/metron-parsers/src/main/config/zookeeper/parsers/syslog5424.json b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/syslog5424.json
similarity index 100%
rename from metron-platform/metron-parsers/src/main/config/zookeeper/parsers/syslog5424.json
rename to metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/syslog5424.json
diff --git a/metron-platform/metron-parsers/src/main/config/zookeeper/parsers/websphere.json b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/websphere.json
similarity index 100%
rename from metron-platform/metron-parsers/src/main/config/zookeeper/parsers/websphere.json
rename to metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/websphere.json
diff --git a/metron-platform/metron-parsers/src/main/config/zookeeper/parsers/yaf.json b/metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/yaf.json
similarity index 100%
rename from metron-platform/metron-parsers/src/main/config/zookeeper/parsers/yaf.json
rename to metron-platform/metron-parsing/metron-parsers/src/main/config/zookeeper/parsers/yaf.json
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/asa/BasicAsaParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/asa/BasicAsaParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/asa/BasicAsaParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/asa/BasicAsaParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bro/BasicBroParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/bro/BasicBroParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bro/BasicBroParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/bro/BasicBroParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bro/JSONCleaner.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/bro/JSONCleaner.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bro/JSONCleaner.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/bro/JSONCleaner.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/cef/CEFParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/cef/CEFParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/cef/CEFParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/cef/CEFParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/fireeye/BasicFireEyeParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/fireeye/BasicFireEyeParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/fireeye/BasicFireEyeParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/fireeye/BasicFireEyeParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/BasicIseParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/BasicIseParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/BasicIseParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/BasicIseParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParser.jj b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParser.jj
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParser.jj
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParser.jj
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParserConstants.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParserConstants.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParserConstants.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParserConstants.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParserTokenManager.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParserTokenManager.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParserTokenManager.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ISEParserTokenManager.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/JavaCharStream.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/JavaCharStream.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/JavaCharStream.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/JavaCharStream.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ParseException.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ParseException.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ParseException.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/ParseException.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/Token.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/Token.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/Token.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/Token.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/TokenMgrError.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/TokenMgrError.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/ise/TokenMgrError.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/ise/TokenMgrError.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/lancope/BasicLancopeParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/lancope/BasicLancopeParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/lancope/BasicLancopeParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/lancope/BasicLancopeParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/logstash/BasicLogstashParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/logstash/BasicLogstashParser.java
similarity index 99%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/logstash/BasicLogstashParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/logstash/BasicLogstashParser.java
index 2f5310c9d6..f10b976473 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/logstash/BasicLogstashParser.java
+++ b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/logstash/BasicLogstashParser.java
@@ -17,14 +17,13 @@
*/
package org.apache.metron.parsers.logstash;
-import org.apache.metron.parsers.BasicParser;
-import org.json.simple.JSONObject;
-import org.json.simple.parser.JSONParser;
-
import java.text.SimpleDateFormat;
import java.util.ArrayList;
import java.util.List;
import java.util.Map;
+import org.apache.metron.parsers.BasicParser;
+import org.json.simple.JSONObject;
+import org.json.simple.parser.JSONParser;
public class BasicLogstashParser extends BasicParser {
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/paloalto/BasicPaloAltoFirewallParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/paloalto/BasicPaloAltoFirewallParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/paloalto/BasicPaloAltoFirewallParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/paloalto/BasicPaloAltoFirewallParser.java
diff --git a/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/paloalto/README.md b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/paloalto/README.md
new file mode 100644
index 0000000000..b6a123061e
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/paloalto/README.md
@@ -0,0 +1,32 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+-->
+# BasicPaloAltoFirewallParser
+## Introduction
+The parser is able to parse logs generated by Palo Alto firewall devices powered by Pan OS. The supported log format is CSV.
+
+The supported log types and versions
+
+| Log type | Pan OS version |
+|----------|----------------|
+| Traffic | 6.0, 6.1, 7.0, 8.0 |
+| Threat | 6.0, 6.1, 7.0, 8.0 |
+| Config | 6.1, 7.0, 8.0 |
+| System | 6.1, 7.0, 8.0 |
+
+
+
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/snort/BasicSnortParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/snort/BasicSnortParser.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/snort/BasicSnortParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/snort/BasicSnortParser.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/sourcefire/BasicSourcefireParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/sourcefire/BasicSourcefireParser.java
similarity index 99%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/sourcefire/BasicSourcefireParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/sourcefire/BasicSourcefireParser.java
index 91faca2213..d7ead054ad 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/sourcefire/BasicSourcefireParser.java
+++ b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/sourcefire/BasicSourcefireParser.java
@@ -18,16 +18,15 @@
package org.apache.metron.parsers.sourcefire;
-import org.apache.metron.parsers.BasicParser;
-import org.json.simple.JSONObject;
-import org.slf4j.Logger;
-import org.slf4j.LoggerFactory;
-
import java.util.ArrayList;
import java.util.List;
import java.util.Map;
import java.util.regex.Matcher;
import java.util.regex.Pattern;
+import org.apache.metron.parsers.BasicParser;
+import org.json.simple.JSONObject;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
@SuppressWarnings("serial")
public class BasicSourcefireParser extends BasicParser {
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/syslog/Syslog5424Parser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/syslog/Syslog5424Parser.java
similarity index 98%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/syslog/Syslog5424Parser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/syslog/Syslog5424Parser.java
index 5b62e85bd6..77ebd18e9f 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/syslog/Syslog5424Parser.java
+++ b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/syslog/Syslog5424Parser.java
@@ -23,15 +23,6 @@
import com.github.palindromicity.syslog.SyslogParser;
import com.github.palindromicity.syslog.SyslogParserBuilder;
import com.github.palindromicity.syslog.dsl.SyslogFieldKeys;
-import org.apache.commons.lang3.StringUtils;
-import org.apache.metron.parsers.BasicParser;
-import org.apache.metron.parsers.DefaultMessageParserResult;
-import org.apache.metron.parsers.interfaces.MessageParser;
-import org.apache.metron.parsers.interfaces.MessageParserResult;
-import org.json.simple.JSONObject;
-import org.slf4j.Logger;
-import org.slf4j.LoggerFactory;
-
import java.io.BufferedReader;
import java.io.IOException;
import java.io.Reader;
@@ -41,12 +32,18 @@
import java.time.LocalDateTime;
import java.time.format.DateTimeFormatter;
import java.util.ArrayList;
-import java.util.Collections;
import java.util.EnumSet;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import java.util.Optional;
+import org.apache.commons.lang3.StringUtils;
+import org.apache.metron.parsers.DefaultMessageParserResult;
+import org.apache.metron.parsers.interfaces.MessageParser;
+import org.apache.metron.parsers.interfaces.MessageParserResult;
+import org.json.simple.JSONObject;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
/**
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/websphere/GrokWebSphereParser.java b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/websphere/GrokWebSphereParser.java
similarity index 99%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/websphere/GrokWebSphereParser.java
rename to metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/websphere/GrokWebSphereParser.java
index a58e0c9efd..44a98aa817 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/websphere/GrokWebSphereParser.java
+++ b/metron-platform/metron-parsing/metron-parsers/src/main/java/org/apache/metron/parsers/websphere/GrokWebSphereParser.java
@@ -18,12 +18,11 @@
package org.apache.metron.parsers.websphere;
-import org.apache.metron.parsers.GrokParser;
-import org.json.simple.JSONObject;
-
import java.text.ParseException;
import java.util.Calendar;
import java.util.Iterator;
+import org.apache.metron.parsers.GrokParser;
+import org.json.simple.JSONObject;
public class GrokWebSphereParser extends GrokParser {
diff --git a/metron-platform/metron-parsing/metron-parsers/src/main/resources/META-INF/LICENSE b/metron-platform/metron-parsing/metron-parsers/src/main/resources/META-INF/LICENSE
new file mode 100644
index 0000000000..849fa54dc4
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/main/resources/META-INF/LICENSE
@@ -0,0 +1,602 @@
+Apache License
+ Version 2.0, January 2004
+ http://www.apache.org/licenses/
+
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+ 1. Definitions.
+
+ "License" shall mean the terms and conditions for use, reproduction,
+ and distribution as defined by Sections 1 through 9 of this document.
+
+ "Licensor" shall mean the copyright owner or entity authorized by
+ the copyright owner that is granting the License.
+
+ "Legal Entity" shall mean the union of the acting entity and all
+ other entities that control, are controlled by, or are under common
+ control with that entity. For the purposes of this definition,
+ "control" means (i) the power, direct or indirect, to cause the
+ direction or management of such entity, whether by contract or
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
+ outstanding shares, or (iii) beneficial ownership of such entity.
+
+ "You" (or "Your") shall mean an individual or Legal Entity
+ exercising permissions granted by this License.
+
+ "Source" form shall mean the preferred form for making modifications,
+ including but not limited to software source code, documentation
+ source, and configuration files.
+
+ "Object" form shall mean any form resulting from mechanical
+ transformation or translation of a Source form, including but
+ not limited to compiled object code, generated documentation,
+ and conversions to other media types.
+
+ "Work" shall mean the work of authorship, whether in Source or
+ Object form, made available under the License, as indicated by a
+ copyright notice that is included in or attached to the work
+ (an example is provided in the Appendix below).
+
+ "Derivative Works" shall mean any work, whether in Source or Object
+ form, that is based on (or derived from) the Work and for which the
+ editorial revisions, annotations, elaborations, or other modifications
+ represent, as a whole, an original work of authorship. For the purposes
+ of this License, Derivative Works shall not include works that remain
+ separable from, or merely link (or bind by name) to the interfaces of,
+ the Work and Derivative Works thereof.
+
+ "Contribution" shall mean any work of authorship, including
+ the original version of the Work and any modifications or additions
+ to that Work or Derivative Works thereof, that is intentionally
+ submitted to Licensor for inclusion in the Work by the copyright owner
+ or by an individual or Legal Entity authorized to submit on behalf of
+ the copyright owner. For the purposes of this definition, "submitted"
+ means any form of electronic, verbal, or written communication sent
+ to the Licensor or its representatives, including but not limited to
+ communication on electronic mailing lists, source code control systems,
+ and issue tracking systems that are managed by, or on behalf of, the
+ Licensor for the purpose of discussing and improving the Work, but
+ excluding communication that is conspicuously marked or otherwise
+ designated in writing by the copyright owner as "Not a Contribution."
+
+ "Contributor" shall mean Licensor and any individual or Legal Entity
+ on behalf of whom a Contribution has been received by Licensor and
+ subsequently incorporated within the Work.
+
+ 2. Grant of Copyright License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ copyright license to reproduce, prepare Derivative Works of,
+ publicly display, publicly perform, sublicense, and distribute the
+ Work and such Derivative Works in Source or Object form.
+
+ 3. Grant of Patent License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ (except as stated in this section) patent license to make, have made,
+ use, offer to sell, sell, import, and otherwise transfer the Work,
+ where such license applies only to those patent claims licensable
+ by such Contributor that are necessarily infringed by their
+ Contribution(s) alone or by combination of their Contribution(s)
+ with the Work to which such Contribution(s) was submitted. If You
+ institute patent litigation against any entity (including a
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
+ or a Contribution incorporated within the Work constitutes direct
+ or contributory patent infringement, then any patent licenses
+ granted to You under this License for that Work shall terminate
+ as of the date such litigation is filed.
+
+ 4. Redistribution. You may reproduce and distribute copies of the
+ Work or Derivative Works thereof in any medium, with or without
+ modifications, and in Source or Object form, provided that You
+ meet the following conditions:
+
+ (a) You must give any other recipients of the Work or
+ Derivative Works a copy of this License; and
+
+ (b) You must cause any modified files to carry prominent notices
+ stating that You changed the files; and
+
+ (c) You must retain, in the Source form of any Derivative Works
+ that You distribute, all copyright, patent, trademark, and
+ attribution notices from the Source form of the Work,
+ excluding those notices that do not pertain to any part of
+ the Derivative Works; and
+
+ (d) If the Work includes a "NOTICE" text file as part of its
+ distribution, then any Derivative Works that You distribute must
+ include a readable copy of the attribution notices contained
+ within such NOTICE file, excluding those notices that do not
+ pertain to any part of the Derivative Works, in at least one
+ of the following places: within a NOTICE text file distributed
+ as part of the Derivative Works; within the Source form or
+ documentation, if provided along with the Derivative Works; or,
+ within a display generated by the Derivative Works, if and
+ wherever such third-party notices normally appear. The contents
+ of the NOTICE file are for informational purposes only and
+ do not modify the License. You may add Your own attribution
+ notices within Derivative Works that You distribute, alongside
+ or as an addendum to the NOTICE text from the Work, provided
+ that such additional attribution notices cannot be construed
+ as modifying the License.
+
+ You may add Your own copyright statement to Your modifications and
+ may provide additional or different license terms and conditions
+ for use, reproduction, or distribution of Your modifications, or
+ for any such Derivative Works as a whole, provided Your use,
+ reproduction, and distribution of the Work otherwise complies with
+ the conditions stated in this License.
+
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
+ any Contribution intentionally submitted for inclusion in the Work
+ by You to the Licensor shall be under the terms and conditions of
+ this License, without any additional terms or conditions.
+ Notwithstanding the above, nothing herein shall supersede or modify
+ the terms of any separate license agreement you may have executed
+ with Licensor regarding such Contributions.
+
+ 6. Trademarks. This License does not grant permission to use the trade
+ names, trademarks, service marks, or product names of the Licensor,
+ except as required for reasonable and customary use in describing the
+ origin of the Work and reproducing the content of the NOTICE file.
+
+ 7. Disclaimer of Warranty. Unless required by applicable law or
+ agreed to in writing, Licensor provides the Work (and each
+ Contributor provides its Contributions) on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+ implied, including, without limitation, any warranties or conditions
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+ PARTICULAR PURPOSE. You are solely responsible for determining the
+ appropriateness of using or redistributing the Work and assume any
+ risks associated with Your exercise of permissions under this License.
+
+ 8. Limitation of Liability. In no event and under no legal theory,
+ whether in tort (including negligence), contract, or otherwise,
+ unless required by applicable law (such as deliberate and grossly
+ negligent acts) or agreed to in writing, shall any Contributor be
+ liable to You for damages, including any direct, indirect, special,
+ incidental, or consequential damages of any character arising as a
+ result of this License or out of the use or inability to use the
+ Work (including but not limited to damages for loss of goodwill,
+ work stoppage, computer failure or malfunction, or any and all
+ other commercial damages or losses), even if such Contributor
+ has been advised of the possibility of such damages.
+
+ 9. Accepting Warranty or Additional Liability. While redistributing
+ the Work or Derivative Works thereof, You may choose to offer,
+ and charge a fee for, acceptance of support, warranty, indemnity,
+ or other liability obligations and/or rights consistent with this
+ License. However, in accepting such obligations, You may act only
+ on Your own behalf and on Your sole responsibility, not on behalf
+ of any other Contributor, and only if You agree to indemnify,
+ defend, and hold each Contributor harmless for any liability
+ incurred by, or claims asserted against, such Contributor by reason
+ of your accepting any such warranty or additional liability.
+
+ END OF TERMS AND CONDITIONS
+
+ APPENDIX: How to apply the Apache License to your work.
+
+ To apply the Apache License to your work, attach the following
+ boilerplate notice, with the fields enclosed by brackets "{}"
+ replaced with your own identifying information. (Don't include
+ the brackets!) The text should be enclosed in the appropriate
+ comment syntax for the file format. We also recommend that a
+ file or class name and description of purpose be included on the
+ same "printed page" as the copyright notice for easier
+ identification within third-party archives.
+
+ Copyright {yyyy} {name of copyright owner}
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+------------------------------------------------------------------------------------
+------------------------------------------------------------------------------------
+ Public Domain
+------------------------------------------------------------------------------------
+
+This product contains the extensions to Java Collections Framework which has
+been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene:
+
+ * LICENSE:
+ * license/LICENSE.jsr166y.txt (Public Domain)
+ * HOMEPAGE:
+ * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/
+ * http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/
+
+This product contains a modified version of Robert Harder's Public Domain
+Base64 Encoder and Decoder, which can be obtained at:
+
+ * LICENSE:
+ * license/LICENSE.base64.txt (Public Domain)
+ * HOMEPAGE:
+ * http://iharder.sourceforge.net/current/java/base64/
+
+
+------------------------------------------------------------------------------------
+ BSD
+------------------------------------------------------------------------------------
+
+This product bundles asm 3.1, which is available under a "BSD Software License" license. For details, see http://asm.ow2.org/
+This product bundles protobuf-java 2.5.0, which is available under a "BSD Software License" license. For details, see http://code.google.com/p/protobuf
+This product bundles jsch 0.1.42, which is available under a "BSD Software License" license. For details, see http://www.jcraft.com/jsch/
+This product bundles paranamer 2.3, which is available under a "BSD Software License" license. For details, see https://github.com/paul-hammant/paranamer
+This product bundles leveldbjni-all 1.8, which is available under a "BSD Software License" license. For details, see https://github.com/fusesource/leveldbjni
+This product bundles scala-library 2.10.6, which is available under a "BSD Software License" license. For details, see http://www.scala-lang.org/
+This product bundles xmlenc 0.52, which is available under a "BSD Software License" license. For details, see http://xmlenc.sourceforge.net
+
+This product contains a modified version of 'JZlib', a re-implementation of
+zlib in pure Java, which can be obtained at:
+
+ * LICENSE:
+ * license/LICENSE.jzlib.txt (BSD Style License)
+ * HOMEPAGE:
+ * http://www.jcraft.com/jzlib/
+
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+------------------------------------------------------------------------------------
+ CDDL v1.1
+------------------------------------------------------------------------------------
+
+This product bundles jersey-guice 1.9, which is available under a "Common Development and Distribution License v1.1" license. For details, see https://jersey.java.net/
+This product bundles jersey-client 1.9, which is available under a "Common Development and Distribution License v1.1" license. For details, see https://jersey.java.net/
+This product bundles jersey-core 1.9, which is available under a "Common Development and Distribution License v1.1" license. For details, see https://jersey.java.net/
+This product bundles jersey-json 1.9, which is available under a "Common Development and Distribution License v1.1" license. For details, see https://jersey.java.net/
+This product bundles jersey-server 1.9, which is available under a "Common Development and Distribution License v1.1" license. For details, see https://jersey.java.net/
+This product bundles jaxb-impl 2.2.3-1, which is available under a "Common Development and Distribution License" license. For details, see http://jaxb.java.net/
+This product bundles activation 1.1, which is available under a "Common Development and Distribution License v1.0" license. For details, see http://java.sun.com/products/javabeans/jaf/index.jsp
+This product bundles jaxb-api 2.2.2, which is available under a "Common Development and Distribution License" license. For details, see https://jaxb.dev.java.net/
+This product bundles stax-api 1.0-2, which is available under a "Common Development and Distribution License v1.0" license. For details, see https://docs.oracle.com/javase/7/docs/api/javax/xml/stream/package-summary.html
+
+COMMON DEVELOPMENT AND DISTRIBUTION LICENSE (CDDL) Version 1.0
+ 1. Definitions.
+ 1.1. "Contributor" means each individual or entity that
+ creates or contributes to the creation of Modifications.
+ 1.2. "Contributor Version" means the combination of the
+ Original Software, prior Modifications used by a
+ Contributor (if any), and the Modifications made by that
+ particular Contributor.
+ 1.3. "Covered Software" means (a) the Original Software, or
+ (b) Modifications, or (c) the combination of files
+ containing Original Software with files containing
+ Modifications, in each case including portions thereof.
+ 1.4. "Executable" means the Covered Software in any form
+ other than Source Code.
+ 1.5. "Initial Developer" means the individual or entity
+ that first makes Original Software available under this
+ License.
+ 1.6. "Larger Work" means a work which combines Covered
+ Software or portions thereof with code not governed by the
+ terms of this License.
+ 1.7. "License" means this document.
+ 1.8. "Licensable" means having the right to grant, to the
+ maximum extent possible, whether at the time of the initial
+ grant or subsequently acquired, any and all of the rights
+ conveyed herein.
+ 1.9. "Modifications" means the Source Code and Executable
+ form of any of the following:
+ A. Any file that results from an addition to,
+ deletion from or modification of the contents of a
+ file containing Original Software or previous
+ Modifications;
+ B. Any new file that contains any part of the
+ Original Software or previous Modification; or
+ C. Any new file that is contributed or otherwise made
+ available under the terms of this License.
+ 1.10. "Original Software" means the Source Code and
+ Executable form of computer software code that is
+ originally released under this License.
+ 1.11. "Patent Claims" means any patent claim(s), now owned
+ or hereafter acquired, including without limitation,
+ method, process, and apparatus claims, in any patent
+ Licensable by grantor.
+ 1.12. "Source Code" means (a) the common form of computer
+ software code in which modifications are made and (b)
+ associated documentation included in or with such code.
+ 1.13. "You" (or "Your") means an individual or a legal
+ entity exercising rights under, and complying with all of
+ the terms of, this License. For legal entities, "You"
+ includes any entity which controls, is controlled by, or is
+ under common control with You. For purposes of this
+ definition, "control" means (a) the power, direct or
+ indirect, to cause the direction or management of such
+ entity, whether by contract or otherwise, or (b) ownership
+ of more than fifty percent (50%) of the outstanding shares
+ or beneficial ownership of such entity.
+ 2. License Grants.
+ 2.1. The Initial Developer Grant.
+ Conditioned upon Your compliance with Section 3.1 below and
+ subject to third party intellectual property claims, the
+ Initial Developer hereby grants You a world-wide,
+ royalty-free, non-exclusive license:
+ (a) under intellectual property rights (other than
+ patent or trademark) Licensable by Initial Developer,
+ to use, reproduce, modify, display, perform,
+ sublicense and distribute the Original Software (or
+ portions thereof), with or without Modifications,
+ and/or as part of a Larger Work; and
+ (b) under Patent Claims infringed by the making,
+ using or selling of Original Software, to make, have
+ made, use, practice, sell, and offer for sale, and/or
+ otherwise dispose of the Original Software (or
+ portions thereof).
+ (c) The licenses granted in Sections 2.1(a) and (b)
+ are effective on the date Initial Developer first
+ distributes or otherwise makes the Original Software
+ available to a third party under the terms of this
+ License.
+ (d) Notwithstanding Section 2.1(b) above, no patent
+ license is granted: (1) for code that You delete from
+ the Original Software, or (2) for infringements
+ caused by: (i) the modification of the Original
+ Software, or (ii) the combination of the Original
+ Software with other software or devices.
+ 2.2. Contributor Grant.
+ Conditioned upon Your compliance with Section 3.1 below and
+ subject to third party intellectual property claims, each
+ Contributor hereby grants You a world-wide, royalty-free,
+ non-exclusive license:
+ (a) under intellectual property rights (other than
+ patent or trademark) Licensable by Contributor to
+ use, reproduce, modify, display, perform, sublicense
+ and distribute the Modifications created by such
+ Contributor (or portions thereof), either on an
+ unmodified basis, with other Modifications, as
+ Covered Software and/or as part of a Larger Work; and
+ (b) under Patent Claims infringed by the making,
+ using, or selling of Modifications made by that
+ Contributor either alone and/or in combination with
+ its Contributor Version (or portions of such
+ combination), to make, use, sell, offer for sale,
+ have made, and/or otherwise dispose of: (1)
+ Modifications made by that Contributor (or portions
+ thereof); and (2) the combination of Modifications
+ made by that Contributor with its Contributor Version
+ (or portions of such combination).
+ (c) The licenses granted in Sections 2.2(a) and
+ 2.2(b) are effective on the date Contributor first
+ distributes or otherwise makes the Modifications
+ available to a third party.
+ (d) Notwithstanding Section 2.2(b) above, no patent
+ license is granted: (1) for any code that Contributor
+ has deleted from the Contributor Version; (2) for
+ infringements caused by: (i) third party
+ modifications of Contributor Version, or (ii) the
+ combination of Modifications made by that Contributor
+ with other software (except as part of the
+ Contributor Version) or other devices; or (3) under
+ Patent Claims infringed by Covered Software in the
+ absence of Modifications made by that Contributor.
+ 3. Distribution Obligations.
+ 3.1. Availability of Source Code.
+ Any Covered Software that You distribute or otherwise make
+ available in Executable form must also be made available in
+ Source Code form and that Source Code form must be
+ distributed only under the terms of this License. You must
+ include a copy of this License with every copy of the
+ Source Code form of the Covered Software You distribute or
+ otherwise make available. You must inform recipients of any
+ such Covered Software in Executable form as to how they can
+ obtain such Covered Software in Source Code form in a
+ reasonable manner on or through a medium customarily used
+ for software exchange.
+ 3.2. Modifications.
+ The Modifications that You create or to which You
+ contribute are governed by the terms of this License. You
+ represent that You believe Your Modifications are Your
+ original creation(s) and/or You have sufficient rights to
+ grant the rights conveyed by this License.
+ 3.3. Required Notices.
+ You must include a notice in each of Your Modifications
+ that identifies You as the Contributor of the Modification.
+ You may not remove or alter any copyright, patent or
+ trademark notices contained within the Covered Software, or
+ any notices of licensing or any descriptive text giving
+ attribution to any Contributor or the Initial Developer.
+ 3.4. Application of Additional Terms.
+ You may not offer or impose any terms on any Covered
+ Software in Source Code form that alters or restricts the
+ applicable version of this License or the recipients'
+ rights hereunder. You may choose to offer, and to charge a
+ fee for, warranty, support, indemnity or liability
+ obligations to one or more recipients of Covered Software.
+ However, you may do so only on Your own behalf, and not on
+ behalf of the Initial Developer or any Contributor. You
+ must make it absolutely clear that any such warranty,
+ support, indemnity or liability obligation is offered by
+ You alone, and You hereby agree to indemnify the Initial
+ Developer and every Contributor for any liability incurred
+ by the Initial Developer or such Contributor as a result of
+ warranty, support, indemnity or liability terms You offer.
+ 3.5. Distribution of Executable Versions.
+ You may distribute the Executable form of the Covered
+ Software under the terms of this License or under the terms
+ of a license of Your choice, which may contain terms
+ different from this License, provided that You are in
+ compliance with the terms of this License and that the
+ license for the Executable form does not attempt to limit
+ or alter the recipient's rights in the Source Code form
+ from the rights set forth in this License. If You
+ distribute the Covered Software in Executable form under a
+ different license, You must make it absolutely clear that
+ any terms which differ from this License are offered by You
+ alone, not by the Initial Developer or Contributor. You
+ hereby agree to indemnify the Initial Developer and every
+ Contributor for any liability incurred by the Initial
+ Developer or such Contributor as a result of any such terms
+ You offer.
+ 3.6. Larger Works.
+ You may create a Larger Work by combining Covered Software
+ with other code not governed by the terms of this License
+ and distribute the Larger Work as a single product. In such
+ a case, You must make sure the requirements of this License
+ are fulfilled for the Covered Software.
+ 4. Versions of the License.
+ 4.1. New Versions.
+ Sun Microsystems, Inc. is the initial license steward and
+ may publish revised and/or new versions of this License
+ from time to time. Each version will be given a
+ distinguishing version number. Except as provided in
+ Section 4.3, no one other than the license steward has the
+ right to modify this License.
+ 4.2. Effect of New Versions.
+ You may always continue to use, distribute or otherwise
+ make the Covered Software available under the terms of the
+ version of the License under which You originally received
+ the Covered Software. If the Initial Developer includes a
+ notice in the Original Software prohibiting it from being
+ distributed or otherwise made available under any
+ subsequent version of the License, You must distribute and
+ make the Covered Software available under the terms of the
+ version of the License under which You originally received
+ the Covered Software. Otherwise, You may also choose to
+ use, distribute or otherwise make the Covered Software
+ available under the terms of any subsequent version of the
+ License published by the license steward.
+ 4.3. Modified Versions.
+ When You are an Initial Developer and You want to create a
+ new license for Your Original Software, You may create and
+ use a modified version of this License if You: (a) rename
+ the license and remove any references to the name of the
+ license steward (except to note that the license differs
+ from this License); and (b) otherwise make it clear that
+ the license contains terms which differ from this License.
+ 5. DISCLAIMER OF WARRANTY.
+ COVERED SOFTWARE IS PROVIDED UNDER THIS LICENSE ON AN "AS IS"
+ BASIS, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+ INCLUDING, WITHOUT LIMITATION, WARRANTIES THAT THE COVERED
+ SOFTWARE IS FREE OF DEFECTS, MERCHANTABLE, FIT FOR A PARTICULAR
+ PURPOSE OR NON-INFRINGING. THE ENTIRE RISK AS TO THE QUALITY AND
+ PERFORMANCE OF THE COVERED SOFTWARE IS WITH YOU. SHOULD ANY
+ COVERED SOFTWARE PROVE DEFECTIVE IN ANY RESPECT, YOU (NOT THE
+ INITIAL DEVELOPER OR ANY OTHER CONTRIBUTOR) ASSUME THE COST OF
+ ANY NECESSARY SERVICING, REPAIR OR CORRECTION. THIS DISCLAIMER OF
+ WARRANTY CONSTITUTES AN ESSENTIAL PART OF THIS LICENSE. NO USE OF
+ ANY COVERED SOFTWARE IS AUTHORIZED HEREUNDER EXCEPT UNDER THIS
+ DISCLAIMER.
+ 6. TERMINATION.
+ 6.1. This License and the rights granted hereunder will
+ terminate automatically if You fail to comply with terms
+ herein and fail to cure such breach within 30 days of
+ becoming aware of the breach. Provisions which, by their
+ nature, must remain in effect beyond the termination of
+ this License shall survive.
+ 6.2. If You assert a patent infringement claim (excluding
+ declaratory judgment actions) against Initial Developer or
+ a Contributor (the Initial Developer or Contributor against
+ whom You assert such claim is referred to as "Participant")
+ alleging that the Participant Software (meaning the
+ Contributor Version where the Participant is a Contributor
+ or the Original Software where the Participant is the
+ Initial Developer) directly or indirectly infringes any
+ patent, then any and all rights granted directly or
+ indirectly to You by such Participant, the Initial
+ Developer (if the Initial Developer is not the Participant)
+ and all Contributors under Sections 2.1 and/or 2.2 of this
+ License shall, upon 60 days notice from Participant
+ terminate prospectively and automatically at the expiration
+ of such 60 day notice period, unless if within such 60 day
+ period You withdraw Your claim with respect to the
+ Participant Software against such Participant either
+ unilaterally or pursuant to a written agreement with
+ Participant.
+ 6.3. In the event of termination under Sections 6.1 or 6.2
+ above, all end user licenses that have been validly granted
+ by You or any distributor hereunder prior to termination
+ (excluding licenses granted to You by any distributor)
+ shall survive termination.
+ 7. LIMITATION OF LIABILITY.
+ UNDER NO CIRCUMSTANCES AND UNDER NO LEGAL THEORY, WHETHER TORT
+ (INCLUDING NEGLIGENCE), CONTRACT, OR OTHERWISE, SHALL YOU, THE
+ INITIAL DEVELOPER, ANY OTHER CONTRIBUTOR, OR ANY DISTRIBUTOR OF
+ COVERED SOFTWARE, OR ANY SUPPLIER OF ANY OF SUCH PARTIES, BE
+ LIABLE TO ANY PERSON FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR
+ CONSEQUENTIAL DAMAGES OF ANY CHARACTER INCLUDING, WITHOUT
+ LIMITATION, DAMAGES FOR LOST PROFITS, LOSS OF GOODWILL, WORK
+ STOPPAGE, COMPUTER FAILURE OR MALFUNCTION, OR ANY AND ALL OTHER
+ COMMERCIAL DAMAGES OR LOSSES, EVEN IF SUCH PARTY SHALL HAVE BEEN
+ INFORMED OF THE POSSIBILITY OF SUCH DAMAGES. THIS LIMITATION OF
+ LIABILITY SHALL NOT APPLY TO LIABILITY FOR DEATH OR PERSONAL
+ INJURY RESULTING FROM SUCH PARTY'S NEGLIGENCE TO THE EXTENT
+ APPLICABLE LAW PROHIBITS SUCH LIMITATION. SOME JURISDICTIONS DO
+ NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR
+ CONSEQUENTIAL DAMAGES, SO THIS EXCLUSION AND LIMITATION MAY NOT
+ APPLY TO YOU.
+ 8. U.S. GOVERNMENT END USERS.
+ The Covered Software is a "commercial item," as that term is
+ defined in 48 C.F.R. 2.101 (Oct. 1995), consisting of "commercial
+ computer software" (as that term is defined at 48 C.F.R. ยค
+ 252.227-7014(a)(1)) and "commercial computer software
+ documentation" as such terms are used in 48 C.F.R. 12.212 (Sept.
+ 1995). Consistent with 48 C.F.R. 12.212 and 48 C.F.R. 227.7202-1
+ through 227.7202-4 (June 1995), all U.S. Government End Users
+ acquire Covered Software with only those rights set forth herein.
+ This U.S. Government Rights clause is in lieu of, and supersedes,
+ any other FAR, DFAR, or other clause or provision that addresses
+ Government rights in computer software under this License.
+ 9. MISCELLANEOUS.
+ This License represents the complete agreement concerning subject
+ matter hereof. If any provision of this License is held to be
+ unenforceable, such provision shall be reformed only to the
+ extent necessary to make it enforceable. This License shall be
+ governed by the law of the jurisdiction specified in a notice
+ contained within the Original Software (except to the extent
+ applicable law, if any, provides otherwise), excluding such
+ jurisdiction's conflict-of-law provisions. Any litigation
+ relating to this License shall be subject to the jurisdiction of
+ the courts located in the jurisdiction and venue specified in a
+ notice contained within the Original Software, with the losing
+ party responsible for costs, including, without limitation, court
+ costs and reasonable attorneys' fees and expenses. The
+ application of the United Nations Convention on Contracts for the
+ International Sale of Goods is expressly excluded. Any law or
+ regulation which provides that the language of a contract shall
+ be construed against the drafter shall not apply to this License.
+ You agree that You alone are responsible for compliance with the
+ United States export administration regulations (and the export
+ control laws and regulation of any other countries) when You use,
+ distribute or otherwise make available any Covered Software.
+ 10. RESPONSIBILITY FOR CLAIMS.
+ As between Initial Developer and the Contributors, each party is
+ responsible for claims and damages arising, directly or
+ indirectly, out of its utilization of rights under this License
+ and You agree to work with Initial Developer and Contributors to
+ distribute such responsibility on an equitable basis. Nothing
+ herein is intended or shall be deemed to constitute any admission
+ of liability.
+
+------------------------------------------------------------------------------------
+ MIT
+------------------------------------------------------------------------------------
+
+This product bundles jopt-simple 4.9, which is available under a "MIT Software License" license. For details, see http://jopt-simple.sourceforge.net
+This product bundles jcodings 1.0.8, which is available under a "MIT Software License" license. For details, see https://github.com/jruby/jcodings
+This product bundles joni 2.1.2, which is available under a "MIT Software License" license. For details, see https://github.com/jruby/joni
+This product bundles slf4j-api 1.7.10, which is available under a "MIT Software License" license. For details, see http://www.slf4j.org
+This product bundles slf4j-log4j12 1.7.10, which is available under a "MIT Software License" license. For details, see http://www.slf4j.org
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
diff --git a/metron-platform/metron-parsing/metron-parsers/src/main/resources/META-INF/NOTICE b/metron-platform/metron-parsing/metron-parsers/src/main/resources/META-INF/NOTICE
new file mode 100644
index 0000000000..456a20a877
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/main/resources/META-INF/NOTICE
@@ -0,0 +1,40 @@
+
+metron-parsers-common
+Copyright 2006-2016 The Apache Software Foundation
+
+This product includes software developed at
+The Apache Software Foundation (http://www.apache.org/).
+
+This product includes software developed for Orekit by
+CS Systรจmes d'Information (http://www.c-s.fr/)
+Copyright 2010-2012 CS Systรจmes d'Information
+
+ The Netty Project
+ =================
+
+Please visit the Netty web site for more information:
+
+ * http://netty.io/
+
+Copyright 2011 The Netty Project
+
+This project contains annotations derived from JCIP-ANNOTATIONS
+Copyright (c) 2005 Brian Goetz and Tim Peierls. See http://www.jcip.net
+
+Objenesis
+Copyright 2006-2013 Joe Walnes, Henri Tremblay, Leonardo Mesquita
+
+Google Guice - Core Library
+Copyright 2006-2011 Google, Inc.
+
+Google Guice - Extensions - Servlet
+Copyright 2006-2011 Google, Inc.
+
+ Portions of this software were originally based on the following:
+ - software copyright (c) 1999, IBM Corporation., http://www.ibm.com.
+ - software copyright (c) 1999, Sun Microsystems., http://www.sun.com.
+ - voluntary contributions made by Paul Eng on behalf of the
+ Apache Software Foundation that were originally developed at iClick, Inc.,
+ software copyright (c) 1999.
+
+
diff --git a/metron-platform/metron-parsers/src/main/resources/patterns/asa b/metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/asa
similarity index 100%
rename from metron-platform/metron-parsers/src/main/resources/patterns/asa
rename to metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/asa
diff --git a/metron-platform/metron-parsers/src/main/resources/patterns/fireeye b/metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/fireeye
similarity index 100%
rename from metron-platform/metron-parsers/src/main/resources/patterns/fireeye
rename to metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/fireeye
diff --git a/metron-platform/metron-parsers/src/main/resources/patterns/sourcefire b/metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/sourcefire
similarity index 100%
rename from metron-platform/metron-parsers/src/main/resources/patterns/sourcefire
rename to metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/sourcefire
diff --git a/metron-platform/metron-parsers/src/main/resources/patterns/squid b/metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/squid
similarity index 100%
rename from metron-platform/metron-parsers/src/main/resources/patterns/squid
rename to metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/squid
diff --git a/metron-platform/metron-parsers/src/main/resources/patterns/websphere b/metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/websphere
similarity index 100%
rename from metron-platform/metron-parsers/src/main/resources/patterns/websphere
rename to metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/websphere
diff --git a/metron-platform/metron-parsers/src/main/resources/patterns/yaf b/metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/yaf
similarity index 100%
rename from metron-platform/metron-parsers/src/main/resources/patterns/yaf
rename to metron-platform/metron-parsing/metron-parsers/src/main/resources/patterns/yaf
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/filters/FiltersTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/filters/FiltersTest.java
new file mode 100644
index 0000000000..2f3784ac3f
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/filters/FiltersTest.java
@@ -0,0 +1,50 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.metron.filters;
+
+import com.google.common.collect.ImmutableMap;
+import org.apache.metron.stellar.dsl.Context;
+import org.apache.metron.parsers.filters.Filters;
+import org.apache.metron.parsers.interfaces.MessageFilter;
+import org.json.simple.JSONObject;
+import org.junit.Assert;
+import org.junit.Test;
+
+import java.util.HashMap;
+import java.util.Map;
+
+public class FiltersTest {
+ @Test
+ public void testDefault() {
+ Assert.assertNull(Filters.get("DEFAULT", null));
+ }
+
+ @Test
+ public void testSingleQueryFilter() throws Exception {
+ {
+ Map<String, Object> config = new HashMap<String, Object>() {{
+ put("filter.query", "exists(foo)");
+ }};
+ MessageFilter<JSONObject> filter = Filters.get(Filters.STELLAR.name(), config);
+ Assert.assertTrue(filter.emit(new JSONObject(ImmutableMap.of("foo", 1)), Context.EMPTY_CONTEXT()));
+ Assert.assertFalse(filter.emit(new JSONObject(ImmutableMap.of("bar", 1)), Context.EMPTY_CONTEXT()));
+ }
+ }
+
+}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/SnortParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/SnortParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/SnortParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/SnortParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/SquidParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/SquidParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/SquidParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/SquidParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/YafParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/YafParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/YafParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/YafParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/asa/BasicAsaParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/asa/BasicAsaParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/asa/BasicAsaParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/asa/BasicAsaParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/bro/BasicBroParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/bro/BasicBroParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/bro/BasicBroParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/bro/BasicBroParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/cef/CEFParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/cef/CEFParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/cef/CEFParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/cef/CEFParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/fireeye/BasicFireEyeParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/fireeye/BasicFireEyeParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/fireeye/BasicFireEyeParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/fireeye/BasicFireEyeParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/ise/BasicIseParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/ise/BasicIseParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/ise/BasicIseParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/ise/BasicIseParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/lancope/BasicLancopeParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/lancope/BasicLancopeParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/lancope/BasicLancopeParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/lancope/BasicLancopeParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/paloalto/BasicPaloAltoFirewallParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/paloalto/BasicPaloAltoFirewallParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/paloalto/BasicPaloAltoFirewallParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/paloalto/BasicPaloAltoFirewallParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/sourcefire/BasicSourcefireParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/sourcefire/BasicSourcefireParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/sourcefire/BasicSourcefireParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/sourcefire/BasicSourcefireParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/syslog/Syslog5424ParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/syslog/Syslog5424ParserTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/syslog/Syslog5424ParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/syslog/Syslog5424ParserTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/websphere/GrokWebSphereParserTest.java b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/websphere/GrokWebSphereParserTest.java
similarity index 98%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/websphere/GrokWebSphereParserTest.java
rename to metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/websphere/GrokWebSphereParserTest.java
index eb447d01f6..81a22bec43 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/websphere/GrokWebSphereParserTest.java
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/java/org/apache/metron/parsers/websphere/GrokWebSphereParserTest.java
@@ -26,10 +26,7 @@
import java.util.Map;
import java.util.Optional;
-import org.apache.log4j.Level;
-import org.apache.metron.parsers.GrokParser;
import org.apache.metron.parsers.interfaces.MessageParserResult;
-import org.apache.metron.test.utils.UnitTestHelper;
import org.json.simple.JSONObject;
import org.junit.Assert;
import org.junit.Before;
@@ -43,7 +40,7 @@
@Before
public void setup() {
parserConfig = new HashMap<>();
- parserConfig.put("grokPath", "../metron-parsers/src/main/resources/patterns/websphere");
+ parserConfig.put("grokPath", "src/main/resources/patterns/websphere");
parserConfig.put("patternLabel", "WEBSPHERE");
parserConfig.put("timestampField", "timestamp_string");
parserConfig.put("dateFormat", "yyyy MMM dd HH:mm:ss");
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/BroSchema.json b/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/BroSchema.json
new file mode 100644
index 0000000000..0105c195c9
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/BroSchema.json
@@ -0,0 +1,28 @@
+{
+ "title": "Bro Schema",
+ "type": "object",
+ "properties": {
+ "status_code": {
+ "type": "integer"
+ },
+ "uid": {
+ "type": "string"
+ },
+ "protocol": {
+ "type": "string"
+ },
+ "ip_dst_addr": {
+ "type": "string"
+ },
+ "host": {
+ "type": "string"
+ },
+ "request_body_len": {
+ "type": "integer"
+ },
+ "response_body_len": {
+ "type": "integer"
+ }
+ },
+ "required": ["status_code", "uid", "protocol","ip_dst_addr","host","request_body_len","response_body_len"]
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/IseSchema.json b/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/IseSchema.json
new file mode 100644
index 0000000000..1c3f6701fa
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/IseSchema.json
@@ -0,0 +1,21 @@
+{
+ "title": "Pcap Schema",
+ "type": "object",
+ "properties": {
+ "ip_src_addr": {
+ "type": "string"
+ },
+ "ip_dst_addr": {
+ "type": "string"
+ },
+ "ip_src_port": {
+ "type": "string"
+ },
+ "ip_dst_port": {
+ "type": "string"
+ },
+ "protocol": {
+ "type": "string"
+ }
+ }
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/LancopeSchema.json b/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/LancopeSchema.json
new file mode 100644
index 0000000000..9118a934ec
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/LancopeSchema.json
@@ -0,0 +1,28 @@
+{
+ "title": "Lancope Schema",
+ "type": "object",
+ "properties": {
+ "ip_src_addr": {
+ "type": "string"
+ },
+ "ip_dst_addr": {
+ "type": "string"
+ },
+ "original_string": {
+ "type": "string"
+ },
+ "@version": {
+ "type": "string"
+ },
+ "timestamp": {
+ "type": "integer"
+ },
+ "type": {
+ "type": "string"
+ },
+ "host": {
+ "type": "string"
+ }
+ },
+ "required": ["ip_src_addr", "ip_dst_addr", "original_string","@version", "timestamp", "type","host"]
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/PcapSchema.json b/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/PcapSchema.json
new file mode 100644
index 0000000000..761396e209
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/PcapSchema.json
@@ -0,0 +1,22 @@
+{
+ "title": "Pcap Schema",
+ "type": "object",
+ "properties": {
+ "ip_src_addr": {
+ "type": "string"
+ },
+ "ip_dst_addr": {
+ "type": "string"
+ },
+ "ip_src_port": {
+ "type": "string"
+ },
+ "ip_dst_port": {
+ "type": "string"
+ },
+ "protocol": {
+ "type": "string"
+ }
+ },
+ "required": ["ip_src_addr", "ip_dst_addr", "ip_src_port", "ip_dst_port","protocol"]
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/SourcefireSchema.json b/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/SourcefireSchema.json
new file mode 100644
index 0000000000..27119099e6
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/TestSchemas/SourcefireSchema.json
@@ -0,0 +1,34 @@
+{
+ "title": "Sourcefire Schema",
+ "type": "object",
+ "properties": {
+ "ip_src_addr": {
+ "type": "string"
+ },
+ "ip_dst_addr": {
+ "type": "string"
+ },
+ "timestamp": {
+ "type": "integer"
+ },
+ "protocol": {
+ "type": "string"
+ },
+ "original_string": {
+ "type": "string"
+ },
+ "original_string": {
+ "type": "string"
+ },
+ "ip_src_port": {
+ "type": "string"
+ },
+ "ip_dst_port": {
+ "type": "string"
+ },
+ "key": {
+ "type": "string"
+ }
+ },
+ "required": ["ip_src_addr", "ip_dst_addr", "ip_src_port", "ip_dst_port","protocol","original_string","key","timestamp"]
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicFireEyeParserTest.config b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicFireEyeParserTest.config
new file mode 100644
index 0000000000..4b4c648bbc
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicFireEyeParserTest.config
@@ -0,0 +1,20 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+#BasicFireEyeParserTestConfig
+logFile=src/test/resources/FireEyeParserTest.log
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicIseParserTest.config b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicIseParserTest.config
new file mode 100644
index 0000000000..d57daceace
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicIseParserTest.config
@@ -0,0 +1,20 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+#IseParserTestConfig
+logFile=src/test/resources/IseParserTest.log
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicLancopeParserTest.config b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicLancopeParserTest.config
new file mode 100644
index 0000000000..bd32770644
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicLancopeParserTest.config
@@ -0,0 +1,20 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+#LancopeParserTestConfig
+logFile=src/test/resources/LancopeParserTest.log
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicPaloAltoFirewallParserTest.config b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicPaloAltoFirewallParserTest.config
new file mode 100644
index 0000000000..61b649e2ea
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicPaloAltoFirewallParserTest.config
@@ -0,0 +1,20 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+#BasicFireEyeParserTestConfig
+logFile=src/test/resources/PaloAltoFirewallParserTest.log
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicSourcefireParserTest.config b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicSourcefireParserTest.config
new file mode 100644
index 0000000000..685b0fddd6
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BasicSourcefireParserTest.config
@@ -0,0 +1,20 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+#BasicSourceFileParserTestConfig
+logFile=src/test/resources/SourceFireTest.log
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BroParserTest.config b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BroParserTest.config
new file mode 100644
index 0000000000..0dcfc717a6
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/config/BroParserTest.config
@@ -0,0 +1,20 @@
+#
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements. See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership. The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License. You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+#BroParserTestConfig
+logFile=src/test/resources/BroParserTest.log
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/FireEyeParserTest.txt b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/FireEyeParserTest.txt
new file mode 100644
index 0000000000..f3be97a526
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/FireEyeParserTest.txt
@@ -0,0 +1,8 @@
+<164>Mar 19 05:24:39 10.220.15.15 fenotify-851983.alert: CEF:0|FireEye|CMS|7.2.1.244420|DM|domain-match|1|rt=Feb 09 2015 12:28:26 UTC dvc=10.201.78.57 cn3Label=cncPort cn3=53 cn2Label=sid cn2=80494706 shost=dev001srv02.example.com proto=udp cs5Label=cncHost cs5=mfdclk001.org dvchost=DEVFEYE1 spt=54527 dvc=10.100.25.16 smac=00:00:0c:07:ac:00 cn1Label=vlan cn1=0 externalId=851983 cs4Label=link cs4=https://DEVCMS01.example.com/event_stream/events_for_bot?ev_id\\=851983 dmac=00:1d:a2:af:32:a1 cs1Label=sname cs1=Trojan.Generic.DNS
+<164>Mar 19 05:24:39 10.220.15.15 fenotify-851987.alert: CEF:0|FireEye|CMS|7.2.1.244420|DM|domain-match|1|rt=Feb 09 2015 12:33:41 UTC dvc=10.201.78.113 cn3Label=cncPort cn3=53 cn2Label=sid cn2=80494706 shost=dev001srv02.example.com proto=udp cs5Label=cncHost cs5=mfdclk001.org dvchost=DEVFEYE1 spt=51218 dvc=10.100.25.16 smac=00:00:0c:07:ac:00 cn1Label=vlan cn1=0 externalId=851987 cs4Label=link cs4=https://DEVCMS01.example.com/event_stream/events_for_bot?ev_id\\=851987 dmac=00:1d:a2:af:32:a1 cs1Label=sname cs1=Trojan.Generic.DNS
+<164>Mar 19 05:24:39 10.220.15.15 fenotify-3483808.2.alert: 1::~~User-Agent: WinHttpClient::~~Host: www.microads.me::~~Connection: Keep-Alive::~~::~~GET /files/microads/update/InjectScript.js HTTP/1.1::~~User-Agent: WinHttpClient::~~Host: www.microads.me::~~Connection: Keep-Alive::~~::~~GET /files/microads/update/InjectScript.js HTTP/1.1::~~User-Agent: WinHttpClient::~~Host: www.microads.me::~~Connection: Keep-Alive::~~::~~GET /files/microads/update/InjectScript.js HTTP/1.1::~~User-Agent: WinHttpClient::~~Host: www.microads.me::~~Connection: Keep-Alive::~~::~~GET /files/microads/update/InjectScript.js HTTP/1.1::~~User-Agent: WinHttpClient::~~Host: www.microads.me::~~Connection: Keep-Alive::~~::~~GET /files/microads/update/InjectScript.js HTTP/1.1::~~User-Agent: WinHttpClient::~~Host: www.microads.me::~~Connection: Keep-Alive::~~::~~GET /files/microads/update/InjectScript.js HTTP/1.1::~~User-Agent: WinHttpClient::~~Host: www.microads.me::~~Connection: Keep-Alive::~~::~~GET /files/microads/update/InjectScript.js HTTP
+<164>Mar 19 05:24:39 10.220.15.15 fenotify-793972.2.alert: Control: no-cache::~~::~~ dmac=00:1d:a2:af:32:a1 cs1Label=sname cs1=Exploit.Kit.Magnitude
+<161>Apr 1 05:24:39 10.220.15.15 fenotify-864461.alert: CEF:0|FireEye|CMS|7.5.1.318703|DM|domain-match|1|rt=Mar 19 2015 12:23:47 UTC src=10.191.193.20 cn3Label=cncPort cn3=53 cn2Label=sid cn2=80494706 shost=abc123.example.com proto=udp spt=60903 cs5Label=cncHost cs5=mfdclk001.org dvchost=ABC123 dvc=10.190.1.16 smac=00:00:0c:07:ac:c8 cn1Label=vlan cn1=0 externalId=864461 cs4Label=link cs4=https:\/\/ABC123.example.com\/event_stream\/events_for_bot?ev_id\\=864461 act=notified dmac=88:43:e1:95:13:29 cs1Label=sname cs1=Trojan.Generic.DNS
+fireeye[-]: <161>Mar 19 05:24:39 10.220.15.15 fenotify-864461.alert: CEF:0|FireEye|CMS|7.5.1.318703|DM|domain-match|1|rt=Mar 19 2015 12:23:47 UTC src=10.191.193.20 cn3Label=cncPort cn3=53 cn2Label=sid cn2=80494706 shost=abc123.example.com proto=udp spt=60903 cs5Label=cncHost cs5=mfdclk001.org dvchost=ABC123 dvc=10.190.1.16 smac=00:00:0c:07:ac:c8 cn1Label=vlan cn1=0 externalId=864461 cs4Label=link cs4=https:\/\/ABC123.example.com\/event_stream\/events_for_bot?ev_id\\=864461 act=notified dmac=88:43:e1:95:13:29 cs1Label=sname cs1=Trojan.Generic.DNS
+fireeye[-]: <161>Apr 1 02:49:49 10.220.15.15 fenotify-900702.alert: CEF:0|FireEye|CMS|7.5.1.318703|DM|domain-match|1|rt=Apr 01 2015 09:49:14 UTC src=10.1.97.20 cn3Label=cncPort cn3=53 cn2Label=sid cn2=80494706 shost=abcd0060xzy03.example.com proto=udp spt=63100 cs5Label=cncHost cs5=mfdclk001.org dvchost=DEV1FEYE1 dvc=10.220.15.16 smac=00:00:0c:07:ac:00 cn1Label=vlan cn1=0 externalId=900702 cs4Label=link cs4=https://ABCD0040CMS01.example.com/event_stream/events_for_bot?ev_id\=900702 act=notified dmac=00:1d:a2:af:32:a1 cs1Label=sname cs1=Trojan.Generic.DNS
+<161>Apr 11 05:24:39 10.220.15.15 fenotify-864461.alert: CEF:0|FireEye|CMS|7.5.1.318703|DM|domain-match|1|rt=Mar 19 2015 12:23:47 UTC src=10.191.193.20 cn3Label=cncPort cn3=53 cn2Label=sid cn2=80494706 shost=abc123.example.com proto=udp spt=60903 cs5Label=cncHost cs5=mfdclk001.org dvchost=ABC123 dvc=10.190.1.16 smac=00:00:0c:07:ac:c8 cn1Label=vlan cn1=0 externalId=864461 cs4Label=link cs4=https:\/\/ABC123.example.com\/event_stream\/events_for_bot?ev_id\\=864461 act=notified dmac=88:43:e1:95:13:29 cs1Label=sname cs1=Trojan.Generic.DNS
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/IseParserTest.txt b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/IseParserTest.txt
new file mode 100644
index 0000000000..54cf4ff52e
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/IseParserTest.txt
@@ -0,0 +1,308 @@
+Aug 6 17:26:31 10.34.84.145 Aug 7 00:45:43 stage-pdp01 CISE_Profiler 0000024855 1 0 2014-08-07 00:45:43.741 -07:00 0000288542 80002 INFO Profiler: Profiler EndPoint profiling event occurred, ConfigVersionId=113, EndpointCertainityMetric=10, EndpointIPAddress=10.56.111.14, EndpointMacAddress=3C:97:0E:C3:F8:F1, EndpointMatchedPolicy=Nortel-Device, EndpointNADAddress=10.56.72.127, EndpointOUI=Wistron InfoComm(Kunshan)Co.\,Ltd., EndpointPolicy=Nortel-Device, EndpointProperty=StaticAssignment=false\,PostureApplicable=Yes\,PolicyVersion=402\,IdentityGroupID=0c1d9270-68a6-11e1-bc72-0050568e013c\,Total Certainty Factor=10\,BYODRegistration=Unknown\,FeedService=false\,EndPointPolicyID=49054ed0-68a6-11e1-bc72-0050568e013c\,FirstCollection=1407397543718\,MatchedPolicyID=49054ed0-68a6-11e1-bc72-0050568e013c\,TimeToProfile=19\,StaticGroupAssignment=false\,NmapSubnetScanID=0\,DeviceRegistrationStatus=NotRegistered\,PortalUser=, EndpointSourceEvent=SNMPQuery Probe, EndpointIdentityGroup=Profiled, ProfilerServer=stage-pdp01.cisco.com,
+Aug 6 17:26:31 10.34.84.145 Aug 7 00:45:43 stage-pdp01 CISE_Profiler 0000024856 1 0 2014-08-07 00:45:43.786 -07:00 0000288543 80002 INFO Profiler: Profiler EndPoint profiling event occurred, ConfigVersionId=113, EndpointCertainityMetric=10, EndpointIPAddress=10.56.111.14, EndpointMacAddress=3C:97:0E:C3:F8:F1, EndpointMatchedPolicy=Nortel-Device, EndpointNADAddress=10.56.72.127, EndpointOUI=Wistron InfoComm(Kunshan)Co.\,Ltd., EndpointPolicy=Nortel-Device, EndpointProperty=StaticAssignment=false\,PostureApplicable=Yes\,BYODRegistration=Unknown\,EndPointPolicyID=49054ed0-68a6-11e1-bc72-0050568e013c\,FirstCollection=1407397543718\,TimeToProfile=19\,LastNmapScanTime=0\,StaticGroupAssignment=false\,DeviceRegistrationStatus=NotRegistered\,UpdateTime=0\,PolicyVersion=402\,IdentityGroupID=0c1d9270-68a6-11e1-bc72-0050568e013c\,Total Certainty Factor=10\,FeedService=false\,MatchedPolicyID=49054ed0-68a6-11e1-bc72-0050568e013c\,NmapScanCount=0\,NmapSubnetScanID=0\,PortalUser=, EndpointSourceEvent=SNMPQuery Probe, EndpointIdentityGroup=Profiled, ProfilerServer=stage-pdp01.cisco.com,
+Aug 6 20:00:52 10.42.7.64 Aug 7 03:20:05 npf-sjca-pdp02 CISE_Profiler 0000373185 1 0 2014-08-07 03:20:05.549 -07:00 0011310202 80002 INFO Profiler: Profiler EndPoint profiling event occurred, ConfigVersionId=241, EndpointCertainityMetric=90, EndpointIPAddress=10.56.129.142, EndpointMacAddress=3C:A9:F4:46:75:CC, EndpointMatchedPolicy=Windows7-Workstation, EndpointNADAddress=10.56.129.4, EndpointOUI=Intel Corporate, EndpointPolicy=Windows7-Workstation, EndpointProperty=StaticAssignment=false\,Calling-Station-ID=3c-a9-f4-46-75-cc\,Device Identifier=\,PostureApplicable=Yes\,dhcp-class-identifier=MSFT 5.0\,host-name=EXAMPLE\,BYODRegistration=Unknown\,EndPointPolicyID=615ed410-68a6-11e1-bc72-0050568e013c\,FirstCollection=1406112353750\,TimeToProfile=11\,Framed-IP-Address=10.56.129.142\,LastNmapScanTime=0\,StaticGroupAssignment=false\,DeviceRegistrationStatus=NotRegistered\,NAS-Port-Type=Wireless - IEEE 802.11\,RegistrationTimeStamp=0\,UpdateTime=1407394245820\,PolicyVersion=403\,IdentityGroupID=5cb39b80-68a6-11e1-bc72-0050568e013c\,Total Certainty Factor=90\,FeedService=false\,MatchedPolicyID=615ed410-68a6-11e1-bc72-0050568e013c\,DestinationIPAddress=10.42.7.64\,CreateTime=1394526689397\,NmapScanCount=0\,NmapSubnetScanID=0\,AAA-Server=npf-sjca-pdp02\,PortalUser=, EndpointSourceEvent=RADIUS Probe, EndpointUserAgent=Mozilla/5.0 (Windows NT 6.1\\\; WOW64\\ rv:30.0) Gecko/20100101 Firefox/30.0, EndpointIdentityGroup=Workstation, ProfilerServer=npf.example.com,
+Aug 6 21:00:48 10.42.7.64 Aug 7 04:20:00 npf-sjca-pdp02 CISE_Profiler 0000373902 1 0 2014-08-07 04:20:00.983 -07:00 0011322557 80002 INFO Profiler: Profiler EndPoint profiling event occurred, ConfigVersionId=241, EndpointCertainityMetric=30, EndpointIPAddress=10.56.129.142, EndpointMacAddress=3C:A9:F4:46:75:CC, EndpointMatchedPolicy=Microsoft-Workstation, EndpointNADAddress=10.56.129.4, EndpointOUI=Intel Corporate, EndpointPolicy=Microsoft-Workstation, EndpointProperty=StaticAssignment=false\,Calling-Station-ID=3c-a9-f4-46-75-cc\,Device Identifier=\,PostureApplicable=Yes\,dhcp-class-identifier=MSFT 5.0\,host-name=EXAMPLE\,BYODRegistration=Unknown\,EndPointPolicyID=5f4a24e0-68a6-11e1-bc72-0050568e013c\,FirstCollection=1406112353750\,TimeToProfile=11\,Framed-IP-Address=10.56.129.142\,LastNmapScanTime=0\,StaticGroupAssignment=false\,DeviceRegistrationStatus=NotRegistered\,NAS-Port-Type=Wireless - IEEE 802.11\,RegistrationTimeStamp=0\,UpdateTime=1407406806572\,PolicyVersion=403\,IdentityGroupID=5cb39b80-68a6-11e1-bc72-0050568e013c\,Total Certainty Factor=30\,FeedService=false\,MatchedPolicyID=5f4a24e0-68a6-11e1-bc72-0050568e013c\,DestinationIPAddress=10.42.7.64\,CreateTime=1394526689397\,NmapScanCount=0\,NmapSubnetScanID=0\,AAA-Server=npf-sjca-pdp02\,PortalUser=, EndpointSourceEvent=RADIUS Probe, EndpointUserAgent=MS-WebServices/1.0, EndpointIdentityGroup=Workstation, ProfilerServer=npf.example.com,
+Aug 6 22:22:50 10.42.7.64 Aug 7 05:42:03 npf-sjca-pdp02 CISE_Profiler 0000374846 1 0 2014-08-07 05:42:03.617 -07:00 0011340138 80002 INFO Profiler: Profiler EndPoint profiling event occurred, ConfigVersionId=241, EndpointCertainityMetric=10, EndpointMacAddress=68:A8:6D:4E:0D:86, EndpointMatchedPolicy=Apple-Device, EndpointOUI=Apple, EndpointPolicy=Apple-Device, EndpointProperty=StaticAssignment=false\,PostureApplicable=Yes\,host-name=PEXAMPLE\,BYODRegistration=Unknown\,EndPointPolicyID=377d8ba0-68a6-11e1-bc72-0050568e013c\,FirstCollection=1407415322895\,TimeToProfile=717\,StaticGroupAssignment=false\,DeviceRegistrationStatus=NotRegistered\,PolicyVersion=403\,IdentityGroupID=abbbcac0-89e6-11e1-bf14-005056aa4dd7\,Total Certainty Factor=10\,ciaddr=0.0.0.0\,FeedService=false\,dhcp-parameter-request-list=1\, 3\, 6\, 15\, 119\, 95\, 252\, 44\, 46\,MatchedPolicyID=377d8ba0-68a6-11e1-bc72-0050568e013c\,NmapSubnetScanID=0\,PortalUser=, EndpointSourceEvent=DHCP Probe, EndpointIdentityGroup=Apple-Device, ProfilerServer=npf.example.com,
+Aug 6 23:30:10 10.42.7.64 Aug 7 06:49:23 npf-sjca-pdp02 CISE_Profiler 0000375603 1 0 2014-08-07 06:49:23.920 -07:00 0011353768 80002 INFO Profiler: Profiler EndPoint profiling event occurred, ConfigVersionId=241, EndpointCertainityMetric=90, EndpointIPAddress=10.56.129.142, EndpointMacAddress=3C:A9:F4:46:75:CC, EndpointMatchedPolicy=Windows7-Workstation, EndpointNADAddress=10.56.129.4, EndpointOUI=Intel Corporate, EndpointPolicy=Windows7-Workstation, EndpointProperty=StaticAssignment=false\,Calling-Station-ID=3c-a9-f4-46-75-cc\,Device Identifier=\,PostureApplicable=Yes\,dhcp-class-identifier=MSFT 5.0\,host-name=EXAMPLE\,BYODRegistration=Unknown\,EndPointPolicyID=615ed410-68a6-11e1-bc72-0050568e013c\,FirstCollection=1406112353750\,TimeToProfile=11\,Framed-IP-Address=10.56.129.142\,LastNmapScanTime=0\,StaticGroupAssignment=false\,DeviceRegistrationStatus=NotRegistered\,NAS-Port-Type=Wireless - IEEE 802.11\,RegistrationTimeStamp=0\,UpdateTime=1407410402099\,PolicyVersion=403\,IdentityGroupID=5cb39b80-68a6-11e1-bc72-0050568e013c\,Total Certainty Factor=90\,FeedService=false\,MatchedPolicyID=615ed410-68a6-11e1-bc72-0050568e013c\,DestinationIPAddress=10.42.7.64\,CreateTime=1394526689397\,NmapScanCount=0\,NmapSubnetScanID=0\,AAA-Server=npf-sjca-pdp02\,PortalUser=, EndpointSourceEvent=RADIUS Probe, EndpointUserAgent=Mozilla/5.0 (Windows NT 6.1\\\; WOW64\\ rv:30.0) Gecko/20100101 Firefox/30.0, EndpointIdentityGroup=Workstation, ProfilerServer=npf.example.com,
+Aug 6 23:30:48 10.42.7.64 Aug 7 06:50:01 npf-sjca-pdp02 CISE_Profiler 0000375611 1 0 2014-08-07 06:50:01.377 -07:00 0011353875 80002 INFO Profiler: Profiler EndPoint profiling event occurred, ConfigVersionId=241, EndpointCertainityMetric=50, EndpointIPAddress=10.34.92.103, EndpointMacAddress=3C:A9:F4:29:FC:3C, EndpointMatchedPolicy=Microsoft-Workstation, EndpointNADAddress=10.34.76.212, EndpointOUI=Intel Corporate, EndpointPolicy=Microsoft-Workstation, EndpointProperty=StaticAssignment=false\,Calling-Station-ID=3c-a9-f4-29-fc-3c\,Device Identifier=\,PostureApplicable=Yes\,dhcp-class-identifier=MSFT 5.0\,host-name=EXAMPLE\,BYODRegistration=Unknown\,EndPointPolicyID=5f4a24e0-68a6-11e1-bc72-0050568e013c\,FirstCollection=1406109860322\,L4_DST_PORT=50428\,TimeToProfile=7\,Framed-IP-Address=10.34.92.103\,LastNmapScanTime=1380758278898\,StaticGroupAssignment=false\,DeviceRegistrationStatus=NotRegistered\,NAS-Port-Type=Wireless - IEEE 802.11\,RegistrationTimeStamp=0\,UpdateTime=1406686034558\,PolicyVersion=403\,IdentityGroupID=5cb39b80-68a6-11e1-bc72-0050568e013c\,Total Certainty Factor=50\,operating-system=Microsoft Windows Vista SP0 - SP2\, Server 2008\, or Windows 7 Ultimate\,FeedService=false\,MatchedPolicyID=5f4a24e0-68a6-11e1-bc72-0050568e013c\,DestinationIPAddress=10.42.7.64\,CreateTime=1373657280926\,NmapScanCount=3\,NmapSubnetScanID=0\,AAA-Server=npf-sjca-pdp02\,PortalUser=, EndpointSourceEvent=RADIUS Probe, EndpointUserAgent=MS-WebServices/1.0, EndpointIdentityGroup=Workstation, ProfilerServer=npf.example.com,
+Aug 6 23:32:52 10.42.7.64 Aug 7 06:52:05 npf-sjca-pdp02 CISE_Profiler 0000375636 1 0 2014-08-07 06:52:05.272 -07:00 0011354313 80002 INFO Profiler: Profiler EndPoint profiling event occurred, ConfigVersionId=241, EndpointCertainityMetric=30, EndpointIPAddress=10.56.129.143, EndpointMacAddress=E8:2A:EA:23:5E:3D, EndpointMatchedPolicy=Microsoft-Workstation, EndpointNADAddress=10.56.129.4, EndpointOUI=Intel Corporate, EndpointPolicy=Microsoft-Workstation, EndpointProperty=StaticAssignment=false\,Calling-Station-ID=e8-2a-ea-23-5e-3d\,Device Identifier=\,PostureApplicable=Yes\,dhcp-class-identifier=MSFT 5.0\,host-name=ANOY-WS01\,BYODRegistration=Unknown\,EndPointPolicyID=5f4a24e0-68a6-11e1-bc72-0050568e013c\,FirstCollection=1406114784910\,TimeToProfile=7\,Framed-IP-Address=10.56.129.143\,LastNmapScanTime=0\,StaticGroupAssignment=false\,DeviceRegistrationStatus=NotRegistered\,NAS-Port-Type=Wireless - IEEE 802.11\,RegistrationTimeStamp=0\,UpdateTime=1407395211208\,PolicyVersion=403\,IdentityGroupID=5cb39b80-68a6-11e1-bc72-0050568e013c\,Total Certainty Factor=30\,FeedService=false\,MatchedPolicyID=5f4a24e0-68a6-11e1-bc72-0050568e013c\,DestinationIPAddress=10.42.7.64\,CreateTime=1405408515121\,NmapScanCount=0\,NmapSubnetScanID=0\,AAA-Server=npf-sjca-pdp02\,PortalUser=, EndpointSourceEvent=RADIUS Probe, EndpointUserAgent=MS-WebServices/1.0, EndpointIdentityGroup=Workstation, ProfilerServer=npf.example.com,
+Aug 6 16:40:52 10.42.7.64 Aug 7 00:00:04 npf-sjca-pdp02 CISE_Failed_Attempts 0000370855 1 0 2014-08-07 00:00:04.527 -07:00 0011266584 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/270932, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056EF53E323F4, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:40:57 10.42.7.63 Aug 7 00:00:09 npf-sjca-pdp01 CISE_Failed_Attempts 0001969834 1 0 2014-08-07 00:00:09.568 -07:00 0098648519 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2084839, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D4A53E323F9, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:41:24 10.34.84.145 Aug 7 00:00:36 stage-pdp01 CISE_Failed_Attempts 0000024616 1 0 2014-08-07 00:00:36.332 -07:00 0000287007 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19317, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:41:26 10.34.84.145 Aug 7 00:00:38 stage-pdp01 CISE_Failed_Attempts 0000024617 1 0 2014-08-07 00:00:38.336 -07:00 0000287011 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19318, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:41:28 10.34.84.145 Aug 7 00:00:40 stage-pdp01 CISE_Failed_Attempts 0000024618 1 0 2014-08-07 00:00:40.336 -07:00 0000287015 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19319, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:41:30 10.34.84.145 Aug 7 00:00:42 stage-pdp01 CISE_Failed_Attempts 0000024619 1 0 2014-08-07 00:00:42.340 -07:00 0000287019 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19320, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:41:32 10.34.84.145 Aug 7 00:00:44 stage-pdp01 CISE_Failed_Attempts 0000024620 1 0 2014-08-07 00:00:44.340 -07:00 0000287023 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19321, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:41:34 10.34.84.145 Aug 7 00:00:46 stage-pdp01 CISE_Failed_Attempts 0000024621 1 0 2014-08-07 00:00:46.344 -07:00 0000287027 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19322, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:42:02 10.42.7.64 Aug 7 00:01:14 npf-sjca-pdp02 CISE_Failed_Attempts 0000370865 1 0 2014-08-07 00:01:14.610 -07:00 0011266810 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=7, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/270940, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056F053E3243A, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:42:07 10.42.7.63 Aug 7 00:01:19 npf-sjca-pdp01 CISE_Failed_Attempts 0001969923 1 0 2014-08-07 00:01:19.665 -07:00 0098652715 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2084986, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D4B53E3243F, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:42:12 10.42.7.64 Aug 7 00:01:24 npf-sjca-pdp02 CISE_Failed_Attempts 0000370867 1 0 2014-08-07 00:01:24.701 -07:00 0011266815 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/270941, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056F153E32444, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:42:17 10.42.7.63 Aug 7 00:01:29 npf-sjca-pdp01 CISE_Failed_Attempts 0001969935 1 0 2014-08-07 00:01:29.746 -07:00 0098653362 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2085007, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D4C53E32449, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:43:22 10.42.7.64 Aug 7 00:02:34 npf-sjca-pdp02 CISE_Failed_Attempts 0000370885 1 0 2014-08-07 00:02:34.792 -07:00 0011267367 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=4, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/270956, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056F353E3248A, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:43:27 10.42.7.63 Aug 7 00:02:39 npf-sjca-pdp01 CISE_Failed_Attempts 0001970043 1 0 2014-08-07 00:02:39.808 -07:00 0098657578 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2085161, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D4D53E3248F, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:43:56 10.42.7.64 Aug 7 00:03:08 npf-sjca-pdp02 CISE_Failed_Attempts 0000370897 1 0 2014-08-07 00:03:08.902 -07:00 0011267657 5435 NOTICE RADIUS: NAS conducted several failed authentications of the same scenario, ConfigVersionId=240, Device IP Address=10.56.129.4, Device Port=32770, DestinationIPAddress=10.42.7.64, DestinationPort=1813, RadiusPacketType=AccountingRequest, UserName=yshchory, Protocol=Radius, RequestLatency=49, NetworkDeviceName=NTN-WLC1, User-Name=yshchory, NAS-IP-Address=10.56.129.4, NAS-Port=1, Framed-IP-Address=10.56.129.141, Class=CACS:0a388104000045cd53e2be75:npf-sjca-pdp02/195481465/270958, Called-Station-ID=6c-41-6a-5f-6e-c0, Calling-Station-ID=90-18-7c-7b-59-01, NAS-Identifier=ntn01-11a-wlc1, Acct-Status-Type=Interim-Update, Acct-Delay-Time=0, Acct-Input-Octets=2359603, Acct-Output-Octets=26928466, Acct-Session-Id=53e2be78/90:18:7c:7b:59:01/13844, Acct-Authentic=RADIUS, Acct-Session-Time=1466, Acct-Input-Packets=14866, Acct-Output-Packets=23043, undefined-52=
+Aug 6 16:44:01 10.42.7.63 Aug 7 00:03:13 npf-sjca-pdp01 CISE_Failed_Attempts 0001970072 1 0 2014-08-07 00:03:13.112 -07:00 0098658804 5435 NOTICE RADIUS: NAS conducted several failed authentications of the same scenario, ConfigVersionId=133, Device IP Address=10.56.72.127, Device Port=1646, DestinationIPAddress=10.42.7.63, DestinationPort=1813, Protocol=Radius, NetworkDeviceName=ntn01-11a-sw4, User-Name=host/salfi-pc.cisco.com, NAS-IP-Address=10.56.72.127, NAS-Port=50212, Service-Type=Framed, Framed-IP-Address=10.56.111.14, Class=CACS:0A38487F00000397BDA7BCAC:npf-sjca-pdp02/195481465/270957, Called-Station-ID=00-26-99-28-5E-BB, Calling-Station-ID=3C-97-0E-C3-F8-F1, Acct-Status-Type=Interim-Update, Acct-Delay-Time=4, Acct-Input-Octets=225395, Acct-Output-Octets=761436, Acct-Session-Id=00000560, Acct-Authentic=RADIUS, Acct-Session-Time=43, Acct-Input-Packets=1163, Acct-Output-Packets=1080, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/12, undefined-151=F54C88B0, cisco-av-pair=audit-session-id=0A38487F00000397BDA7BCAC, cisco-av-pair=connect-progress=Auth Open, AcsSessionID=npf-sjca-pdp01/195491152/2085221, FailureReason=11038 RADIUS Accounting-Request header contains invalid Authenticator field, Step=11004, Step=11017, Step=11038, Step=5435, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0A38487F00000397BDA7BCAC, TotalFailedAttempts=2, TotalFailedTime=42, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired,
+Aug 6 16:44:32 10.42.7.64 Aug 7 00:03:44 npf-sjca-pdp02 CISE_Failed_Attempts 0000370899 1 0 2014-08-07 00:03:44.851 -07:00 0011267663 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=7, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/270963, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056F453E324D0, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:44:36 10.34.84.145 Aug 7 00:03:48 stage-pdp01 CISE_Failed_Attempts 0000024632 1 0 2014-08-07 00:03:48.375 -07:00 0000287084 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19329, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:44:37 10.42.7.63 Aug 7 00:03:49 npf-sjca-pdp01 CISE_Failed_Attempts 0001970128 1 0 2014-08-07 00:03:49.893 -07:00 0098661643 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2085307, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D4E53E324D5, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:44:38 10.34.84.145 Aug 7 00:03:50 stage-pdp01 CISE_Failed_Attempts 0000024633 1 0 2014-08-07 00:03:50.379 -07:00 0000287088 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19330, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:44:40 10.34.84.145 Aug 7 00:03:52 stage-pdp01 CISE_Failed_Attempts 0000024634 1 0 2014-08-07 00:03:52.379 -07:00 0000287092 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19331, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:44:42 10.34.84.145 Aug 7 00:03:54 stage-pdp01 CISE_Failed_Attempts 0000024635 1 0 2014-08-07 00:03:54.387 -07:00 0000287096 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19332, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:44:42 10.42.7.64 Aug 7 00:03:54 npf-sjca-pdp02 CISE_Failed_Attempts 0000370903 1 0 2014-08-07 00:03:54.924 -07:00 0011267670 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=4, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/270964, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056F553E324DA, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:44:44 10.34.84.145 Aug 7 00:03:56 stage-pdp01 CISE_Failed_Attempts 0000024636 1 0 2014-08-07 00:03:56.386 -07:00 0000287100 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19333, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:44:46 10.34.84.145 Aug 7 00:03:58 stage-pdp01 CISE_Failed_Attempts 0000024637 1 0 2014-08-07 00:03:58.390 -07:00 0000287104 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19334, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:44:47 10.42.7.63 Aug 7 00:03:59 npf-sjca-pdp01 CISE_Failed_Attempts 0001970140 1 0 2014-08-07 00:03:59.951 -07:00 0098662310 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2085331, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D4F53E324DF, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:44:48 10.42.7.64 Aug 7 00:04:00 npf-sjca-pdp02 CISE_Failed_Attempts 0000370905 1 0 2014-08-07 00:04:00.526 -07:00 0011267674 5435 NOTICE RADIUS: NAS conducted several failed authentications of the same scenario, ConfigVersionId=240, Device IP Address=10.56.72.127, Device Port=1646, DestinationIPAddress=10.42.7.64, DestinationPort=1813, Protocol=Radius, NetworkDeviceName=ntn01-11a-sw4, User-Name=host/salfi-pc.cisco.com, NAS-IP-Address=10.56.72.127, NAS-Port=50212, Service-Type=Framed, Framed-IP-Address=169.254.53.87, Class=CACS:0A38487F00000397BDA7BCAC:npf-sjca-pdp02/195481465/270957, Called-Station-ID=00-26-99-28-5E-BB, Calling-Station-ID=3C-97-0E-C3-F8-F1, Acct-Status-Type=Interim-Update, Acct-Delay-Time=0, Acct-Input-Octets=1458615, Acct-Output-Octets=3836368, Acct-Session-Id=00000560, Acct-Authentic=RADIUS, Acct-Session-Time=95, Acct-Input-Packets=4505, Acct-Output-Packets=5619, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/12, undefined-151=F54C88B0, cisco-av-pair=audit-session-id=0A38487F00000397BDA7BCAC, cisco-av-pair=connect-progress=Auth Open, AcsSessionID=npf-sjca-pdp02/195481465/270965, FailureReason=11038 RADIUS Accounting-Request header contains invalid Authenticator field, Step=11004, Step=11017, Step=11038, Step=5435, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0A38487F00000397BDA7BCAC, TotalFailedAttempts=2, TotalFailedTime=52, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired,
+Aug 6 16:45:52 10.42.7.64 Aug 7 00:05:04 npf-sjca-pdp02 CISE_Failed_Attempts 0000370920 1 0 2014-08-07 00:05:04.969 -07:00 0011267987 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=6, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/270977, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056F653E32520, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:45:58 10.42.7.63 Aug 7 00:05:09 npf-sjca-pdp01 CISE_Failed_Attempts 0001970212 1 0 2014-08-07 00:05:09.998 -07:00 0098665518 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2085460, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5053E32525, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:47:03 10.42.7.64 Aug 7 00:06:15 npf-sjca-pdp02 CISE_Failed_Attempts 0000370931 1 0 2014-08-07 00:06:15.016 -07:00 0011268196 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/270985, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056F753E32567, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:47:08 10.42.7.63 Aug 7 00:06:20 npf-sjca-pdp01 CISE_Failed_Attempts 0001970324 1 0 2014-08-07 00:06:20.055 -07:00 0098669942 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2085599, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5153E3256C, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:47:13 10.42.7.64 Aug 7 00:06:25 npf-sjca-pdp02 CISE_Failed_Attempts 0000370934 1 0 2014-08-07 00:06:25.097 -07:00 0011268209 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/270987, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056F853E32571, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:47:18 10.42.7.63 Aug 7 00:06:30 npf-sjca-pdp01 CISE_Failed_Attempts 0001970335 1 0 2014-08-07 00:06:30.119 -07:00 0098670037 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2085618, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5253E32576, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:47:48 10.34.84.145 Aug 7 00:07:00 stage-pdp01 CISE_Failed_Attempts 0000024649 1 0 2014-08-07 00:07:00.418 -07:00 0000287210 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19342, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:47:50 10.34.84.145 Aug 7 00:07:02 stage-pdp01 CISE_Failed_Attempts 0000024650 1 0 2014-08-07 00:07:02.421 -07:00 0000287214 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19343, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:47:52 10.34.84.145 Aug 7 00:07:04 stage-pdp01 CISE_Failed_Attempts 0000024651 1 0 2014-08-07 00:07:04.425 -07:00 0000287218 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19344, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:47:54 10.34.84.145 Aug 7 00:07:06 stage-pdp01 CISE_Failed_Attempts 0000024652 1 0 2014-08-07 00:07:06.429 -07:00 0000287222 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19345, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:47:56 10.34.84.145 Aug 7 00:07:08 stage-pdp01 CISE_Failed_Attempts 0000024653 1 0 2014-08-07 00:07:08.429 -07:00 0000287226 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19346, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:47:58 10.34.84.145 Aug 7 00:07:10 stage-pdp01 CISE_Failed_Attempts 0000024654 1 0 2014-08-07 00:07:10.433 -07:00 0000287230 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19347, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:48:23 10.42.7.64 Aug 7 00:07:35 npf-sjca-pdp02 CISE_Failed_Attempts 0000370955 1 0 2014-08-07 00:07:35.138 -07:00 0011268472 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271001, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056F953E325B7, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:48:28 10.42.7.63 Aug 7 00:07:40 npf-sjca-pdp01 CISE_Failed_Attempts 0001970420 1 0 2014-08-07 00:07:40.178 -07:00 0098673462 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2085757, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5353E325BC, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:49:33 10.42.7.64 Aug 7 00:08:45 npf-sjca-pdp02 CISE_Failed_Attempts 0000370984 1 0 2014-08-07 00:08:45.219 -07:00 0011269071 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271016, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056FB53E325FD, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:49:38 10.42.7.63 Aug 7 00:08:50 npf-sjca-pdp01 CISE_Failed_Attempts 0001970519 1 0 2014-08-07 00:08:50.259 -07:00 0098677825 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2085892, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5453E32602, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:49:43 10.42.7.64 Aug 7 00:08:55 npf-sjca-pdp02 CISE_Failed_Attempts 0000370986 1 0 2014-08-07 00:08:55.298 -07:00 0011269076 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271017, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056FC53E32607, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:49:48 10.42.7.63 Aug 7 00:09:00 npf-sjca-pdp01 CISE_Failed_Attempts 0001970524 1 0 2014-08-07 00:09:00.330 -07:00 0098678019 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2085909, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5553E3260C, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:50:53 10.42.7.64 Aug 7 00:10:05 npf-sjca-pdp02 CISE_Failed_Attempts 0000370999 1 0 2014-08-07 00:10:05.339 -07:00 0011269371 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271027, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056FD53E3264D, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:50:58 10.42.7.63 Aug 7 00:10:10 npf-sjca-pdp01 CISE_Failed_Attempts 0001970625 1 0 2014-08-07 00:10:10.388 -07:00 0098682297 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2086061, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5653E32652, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:51:00 10.34.84.145 Aug 7 00:10:12 stage-pdp01 CISE_Failed_Attempts 0000024661 1 0 2014-08-07 00:10:12.492 -07:00 0000287258 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19354, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:51:02 10.34.84.145 Aug 7 00:10:14 stage-pdp01 CISE_Failed_Attempts 0000024662 1 0 2014-08-07 00:10:14.496 -07:00 0000287262 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19355, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:51:04 10.34.84.145 Aug 7 00:10:16 stage-pdp01 CISE_Failed_Attempts 0000024663 1 0 2014-08-07 00:10:16.496 -07:00 0000287266 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19356, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:51:06 10.34.84.145 Aug 7 00:10:18 stage-pdp01 CISE_Failed_Attempts 0000024664 1 0 2014-08-07 00:10:18.500 -07:00 0000287270 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19357, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:51:08 10.34.84.145 Aug 7 00:10:20 stage-pdp01 CISE_Failed_Attempts 0000024665 1 0 2014-08-07 00:10:20.504 -07:00 0000287274 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19358, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:51:10 10.34.84.145 Aug 7 00:10:22 stage-pdp01 CISE_Failed_Attempts 0000024667 1 0 2014-08-07 00:10:22.507 -07:00 0000287279 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19359, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:52:03 10.42.7.64 Aug 7 00:11:15 npf-sjca-pdp02 CISE_Failed_Attempts 0000371005 1 0 2014-08-07 00:11:15.432 -07:00 0011269421 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=4, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271031, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056FE53E32693, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:52:08 10.42.7.63 Aug 7 00:11:20 npf-sjca-pdp01 CISE_Failed_Attempts 0001970691 1 0 2014-08-07 00:11:20.468 -07:00 0098685176 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2086181, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5753E32698, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:52:13 10.42.7.64 Aug 7 00:11:25 npf-sjca-pdp02 CISE_Failed_Attempts 0000371007 1 0 2014-08-07 00:11:25.515 -07:00 0011269426 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271032, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056FF53E3269D, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:52:18 10.42.7.63 Aug 7 00:11:30 npf-sjca-pdp01 CISE_Failed_Attempts 0001970708 1 0 2014-08-07 00:11:30.551 -07:00 0098685669 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=8, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2086202, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5853E326A2, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:53:23 10.42.7.64 Aug 7 00:12:35 npf-sjca-pdp02 CISE_Failed_Attempts 0000371016 1 0 2014-08-07 00:12:35.547 -07:00 0011269586 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271040, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a07400000570053E326E3, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:53:28 10.42.7.63 Aug 7 00:12:40 npf-sjca-pdp01 CISE_Failed_Attempts 0001970802 1 0 2014-08-07 00:12:40.596 -07:00 0098689883 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2086334, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5953E326E8, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:54:12 10.34.84.145 Aug 7 00:13:24 stage-pdp01 CISE_Failed_Attempts 0000024680 1 0 2014-08-07 00:13:24.527 -07:00 0000287388 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19368, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:54:14 10.34.84.145 Aug 7 00:13:26 stage-pdp01 CISE_Failed_Attempts 0000024681 1 0 2014-08-07 00:13:26.531 -07:00 0000287392 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19369, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:54:16 10.34.84.145 Aug 7 00:13:28 stage-pdp01 CISE_Failed_Attempts 0000024682 1 0 2014-08-07 00:13:28.534 -07:00 0000287396 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19370, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:54:18 10.34.84.145 Aug 7 00:13:30 stage-pdp01 CISE_Failed_Attempts 0000024683 1 0 2014-08-07 00:13:30.538 -07:00 0000287400 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19371, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:54:20 10.34.84.145 Aug 7 00:13:32 stage-pdp01 CISE_Failed_Attempts 0000024684 1 0 2014-08-07 00:13:32.538 -07:00 0000287404 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19372, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:54:22 10.34.84.145 Aug 7 00:13:34 stage-pdp01 CISE_Failed_Attempts 0000024685 1 0 2014-08-07 00:13:34.542 -07:00 0000287408 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19373, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:54:33 10.42.7.64 Aug 7 00:13:45 npf-sjca-pdp02 CISE_Failed_Attempts 0000371020 1 0 2014-08-07 00:13:45.628 -07:00 0011269631 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271044, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a07400000570153E32729, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:54:38 10.42.7.63 Aug 7 00:13:50 npf-sjca-pdp01 CISE_Failed_Attempts 0001970913 1 0 2014-08-07 00:13:50.668 -07:00 0098695334 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2086486, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5A53E3272E, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:54:43 10.42.7.64 Aug 7 00:13:55 npf-sjca-pdp02 CISE_Failed_Attempts 0000371025 1 0 2014-08-07 00:13:55.694 -07:00 0011269740 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=7, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271048, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a07400000570253E32733, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:54:48 10.42.7.63 Aug 7 00:14:00 npf-sjca-pdp01 CISE_Failed_Attempts 0001970924 1 0 2014-08-07 00:14:00.705 -07:00 0098695591 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2086505, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5B53E32738, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:55:53 10.42.7.64 Aug 7 00:15:05 npf-sjca-pdp02 CISE_Failed_Attempts 0000371036 1 0 2014-08-07 00:15:05.742 -07:00 0011270054 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=6, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271057, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a07400000570353E32779, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:55:58 10.42.7.63 Aug 7 00:15:10 npf-sjca-pdp01 CISE_Failed_Attempts 0001970997 1 0 2014-08-07 00:15:10.772 -07:00 0098698954 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2086621, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5C53E3277E, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:57:03 10.42.7.64 Aug 7 00:16:15 npf-sjca-pdp02 CISE_Failed_Attempts 0000371051 1 0 2014-08-07 00:16:15.827 -07:00 0011270497 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=6, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271067, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a07400000570453E327BF, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:57:08 10.42.7.63 Aug 7 00:16:20 npf-sjca-pdp01 CISE_Failed_Attempts 0001971096 1 0 2014-08-07 00:16:20.857 -07:00 0098703837 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2086806, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5D53E327C4, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:57:24 10.34.84.145 Aug 7 00:16:36 stage-pdp01 CISE_Failed_Attempts 0000024697 1 0 2014-08-07 00:16:36.602 -07:00 0000287553 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19384, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:57:26 10.34.84.145 Aug 7 00:16:38 stage-pdp01 CISE_Failed_Attempts 0000024698 1 0 2014-08-07 00:16:38.605 -07:00 0000287557 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19385, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:57:28 10.34.84.145 Aug 7 00:16:40 stage-pdp01 CISE_Failed_Attempts 0000024699 1 0 2014-08-07 00:16:40.609 -07:00 0000287561 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19386, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:57:30 10.34.84.145 Aug 7 00:16:42 stage-pdp01 CISE_Failed_Attempts 0000024700 1 0 2014-08-07 00:16:42.613 -07:00 0000287565 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19387, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:57:32 10.34.84.145 Aug 7 00:16:44 stage-pdp01 CISE_Failed_Attempts 0000024701 1 0 2014-08-07 00:16:44.613 -07:00 0000287569 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19388, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:57:34 10.34.84.145 Aug 7 00:16:46 stage-pdp01 CISE_Failed_Attempts 0000024702 1 0 2014-08-07 00:16:46.617 -07:00 0000287573 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19389, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:58:03 10.42.7.64 Aug 7 00:17:15 npf-sjca-pdp02 CISE_Failed_Attempts 0000371063 1 0 2014-08-07 00:17:15.966 -07:00 0011270832 5435 NOTICE RADIUS: NAS conducted several failed authentications of the same scenario, ConfigVersionId=240, Device IP Address=10.34.76.212, Device Port=32770, DestinationIPAddress=10.42.7.64, DestinationPort=1813, RadiusPacketType=AccountingRequest, UserName=hslai, Protocol=Radius, RequestLatency=25, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=hslai, NAS-IP-Address=10.34.76.212, NAS-Port=1, Framed-IP-Address=10.34.94.11, Class=CACS:0a224cd40002fdf953e327f2:npf-sjca-pdp02/195481465/271072, Called-Station-ID=88-43-e1-62-1d-20, Calling-Station-ID=24-a2-e1-3b-4b-cb, NAS-Identifier=sjcm-00a-npf-wlc1, Acct-Status-Type=Interim-Update, Acct-Delay-Time=0, Acct-Input-Octets=5198, Acct-Output-Octets=4093, Acct-Session-Id=53e327f2/24:a2:e1:3b:4b:cb/174403, Acct-Authentic=RADIUS, Acct-Session-Time=9, Acct-Input-Packets=37, Acct-Output-Packets=13, undefined-52=
+Aug 6 16:58:13 10.42.7.64 Aug 7 00:17:25 npf-sjca-pdp02 CISE_Failed_Attempts 0000371065 1 0 2014-08-07 00:17:25.902 -07:00 0011270838 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=4, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271076, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a07400000570553E32805, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:58:18 10.42.7.63 Aug 7 00:17:30 npf-sjca-pdp01 CISE_Failed_Attempts 0001971204 1 0 2014-08-07 00:17:30.916 -07:00 0098707928 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2086981, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5E53E3280A, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:59:23 10.42.7.64 Aug 7 00:18:35 npf-sjca-pdp02 CISE_Failed_Attempts 0000371070 1 0 2014-08-07 00:18:35.942 -07:00 0011271044 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271081, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a07400000570653E3284B, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:59:28 10.42.7.64 Aug 7 00:18:40 npf-sjca-pdp02 CISE_Failed_Attempts 0000371072 1 0 2014-08-07 00:18:40.669 -07:00 0011271053 5400 NOTICE Failed-Attempt: Authentication failed, ConfigVersionId=240, Device IP Address=10.56.129.4, Device Port=32770, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=istern, Protocol=Radius, RequestLatency=12, NetworkDeviceName=NTN-WLC1, User-Name=istern, NAS-IP-Address=10.56.129.4, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a388104000045de53e2c750\;41SessionID=npf-sjca-pdp02/195481465/271077\;, Called-Station-ID=70-10-5c-f3-2f-80:alpha_example, Calling-Station-ID=f0-27-65-48-8c-8f, NAS-Identifier=ntn01-11a-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 604, undefined-89=
+Aug 6 16:59:28 10.42.7.63 Aug 7 00:18:40 npf-sjca-pdp01 CISE_Failed_Attempts 0001971282 1 0 2014-08-07 00:18:40.981 -07:00 0098711291 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2087140, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D5F53E32850, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 17:00:33 10.42.7.64 Aug 7 00:19:46 npf-sjca-pdp02 CISE_Failed_Attempts 0000371080 1 0 2014-08-07 00:19:46.020 -07:00 0011271232 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271087, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a07400000570753E32892, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 17:00:36 10.34.84.145 Aug 7 00:19:48 stage-pdp01 CISE_Failed_Attempts 0000024712 1 0 2014-08-07 00:19:48.660 -07:00 0000287604 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19396, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 17:00:38 10.34.84.145 Aug 7 00:19:50 stage-pdp01 CISE_Failed_Attempts 0000024713 1 0 2014-08-07 00:19:50.664 -07:00 0000287608 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19397, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 17:00:39 10.42.7.63 Aug 7 00:19:51 npf-sjca-pdp01 CISE_Failed_Attempts 0001971393 1 0 2014-08-07 00:19:51.042 -07:00 0098716185 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2087311, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D6053E32897, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 17:00:40 10.34.84.145 Aug 7 00:19:52 stage-pdp01 CISE_Failed_Attempts 0000024714 1 0 2014-08-07 00:19:52.664 -07:00 0000287612 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19398, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 17:00:42 10.34.84.145 Aug 7 00:19:54 stage-pdp01 CISE_Failed_Attempts 0000024715 1 0 2014-08-07 00:19:54.668 -07:00 0000287616 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19399, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 17:00:44 10.34.84.145 Aug 7 00:19:56 stage-pdp01 CISE_Failed_Attempts 0000024716 1 0 2014-08-07 00:19:56.672 -07:00 0000287620 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19400, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 17:00:46 10.34.84.145 Aug 7 00:19:58 stage-pdp01 CISE_Failed_Attempts 0000024717 1 0 2014-08-07 00:19:58.675 -07:00 0000287624 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19401, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 17:01:44 10.42.7.64 Aug 7 00:20:56 npf-sjca-pdp02 CISE_Failed_Attempts 0000371095 1 0 2014-08-07 00:20:56.062 -07:00 0011271644 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271099, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a07400000570853E328D8, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 17:01:49 10.42.7.63 Aug 7 00:21:01 npf-sjca-pdp01 CISE_Failed_Attempts 0001971475 1 0 2014-08-07 00:21:01.119 -07:00 0098720317 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2087472, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D6153E328DD, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 17:02:54 10.42.7.64 Aug 7 00:22:06 npf-sjca-pdp02 CISE_Failed_Attempts 0000371100 1 0 2014-08-07 00:22:06.143 -07:00 0011271684 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=4, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/271102, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a07400000570953E3291E, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 17:02:59 10.42.7.63 Aug 7 00:22:11 npf-sjca-pdp01 CISE_Failed_Attempts 0001971589 1 0 2014-08-07 00:22:11.182 -07:00 0098725955 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=1, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2087646, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D6253E32923, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 17:03:48 10.34.84.145 Aug 7 00:23:00 stage-pdp01 CISE_Failed_Attempts 0000024729 1 0 2014-08-07 00:23:00.739 -07:00 0000287682 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19408, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 17:03:50 10.34.84.145 Aug 7 00:23:02 stage-pdp01 CISE_Failed_Attempts 0000024730 1 0 2014-08-07 00:23:02.743 -07:00 0000287686 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19409, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 17:03:52 10.34.84.145 Aug 7 00:23:04 stage-pdp01 CISE_Failed_Attempts 0000024731 1 0 2014-08-07 00:23:04.742 -07:00 0000287690 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19410, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:40:48 10.34.84.145 Aug 7 00:00:00 stage-pdp01 CISE_Failed_Attempts 0000024612 1 0 2014-08-07 00:00:00.178 -07:00 0000286990 5413 NOTICE Failed-Attempt: RADIUS Accounting-Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1813, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Called-Station-ID=192.168.30.11, Calling-Station-ID=192.168.30.11, NAS-Identifier=Cisco_1b:e0:84, Acct-Status-Type=Start, Acct-Session-Id=ad:c5:5c:92, Acct-Authentic=RADIUS, AcsSessionID=stage-pdp01/196593288/19314, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11004, Step=11017, Step=11007, Step=5413,
+Aug 6 16:40:48 10.42.7.63 Aug 7 00:00:00 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969821 1 0 2014-08-07 00:00:00.186 -07:00 0098648054 12932 WARN Failed-Attempt: Supplicant stopped responding to ISE after sending it the first EAP-FAST message, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084571, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-7D-EF, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22964453e3218b00000d14,
+Aug 6 16:40:48 10.42.7.63 Aug 7 00:00:00 npf-sjca-pdp01 CISE_Failed_Attempts 0001969822 1 0 2014-08-07 00:00:00.186 -07:00 0098648055 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084571, SelectedAccessService=Default Network Access, FailureReason=12932 Supplicant stopped responding to ISE after sending it the first EAP-FAST message, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=12932, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-7D-EF, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap5, CPMSessionID=0a22964453e3218b00000d14, EndPointMACAddress=00-23-33-41-7D-EF, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=20=120001, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:40:48 10.42.7.64 Aug 7 00:00:00 npf-sjca-pdp02 CISE_Passed_Authentications 0000370852 1 0 2014-08-07 00:00:00.581 -07:00 0011266563 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.34.76.212, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=maswank, Protocol=Radius, RequestLatency=63, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=maswank, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a224cd40002fdef53e323ef\;41SessionID=npf-sjca-pdp02/195481465/270930\;, Called-Station-ID=a4-56-30-0f-78-80:alpha_example, Calling-Station-ID=00-21-6a-ab-3a-fe, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 601, undefined-89=
+Aug 6 16:40:48 10.42.7.64 Aug 7 00:00:00 npf-sjca-pdp02 CISE_RADIUS_Accounting 0000370853 1 0 2014-08-07 00:00:00.609 -07:00 0011266578 3000 NOTICE Radius-Accounting: RADIUS Accounting start request, ConfigVersionId=240, Device IP Address=10.34.76.212, RequestLatency=23, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=maswank, NAS-IP-Address=10.34.76.212, NAS-Port=1, Class=CACS:0a224cd40002fdef53e323ef:npf-sjca-pdp02/195481465/270930, Called-Station-ID=88-43-e1-62-1d-20, Calling-Station-ID=00-21-6a-ab-3a-fe, NAS-Identifier=sjcm-00a-npf-wlc1, Acct-Status-Type=Start, Acct-Session-Id=53e323f0/00:21:6a:ab:3a:fe/174396, Acct-Authentic=RADIUS, Event-Timestamp=1407394800, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 603, cisco-av-pair=audit-session-id=0a224cd40002fdef53e323ef, Airespace-Wlan-Id=1, AcsSessionID=npf-sjca-pdp02/195481465/270931, SelectedAccessService=Default Network Access, Step=11004, Step=11017, Step=15049, Step=15008, Step=15004, Step=11005, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC, CPMSessionID=0a224cd40002fdef53e323ef, AllowedProtocolMatchedRule=Byod-Dot1x-SJCM1, Model Name=5508, Software Version=7.3.113.109, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wireless#WLC,
+Aug 6 16:40:48 10.34.84.146 Aug 7 00:00:00 stage-pdp02 CISE_System_Statistics 0000002927 1 0 2014-08-07 00:00:00.642 -07:00 0000048588 70000 NOTICE System-Stats: ISE Utilization, ConfigVersionId=10, SysStatsUtilizationCpu=0.76%, SysStatsUtilizationNetwork=eth0: rcvd = 2487452\; sent = 201012 \;rcvd_dropped = 0\; sent_dropped = 0, SysStatsUtilizationMemory=40.85%, SysStatsUtilizationDiskIO=0.03%, SysStatsUtilizationDiskSpace=9% /, SysStatsUtilizationDiskSpace=10% /boot, SysStatsUtilizationDiskSpace=2% /localdisk, SysStatsUtilizationDiskSpace=7% /storedconfig, SysStatsUtilizationDiskSpace=2% /tmp, AverageRadiusRequestLatency=0, AverageTacacsRequestLatency=0, DeltaRadiusRequestCount=0, DeltaTacacsRequestCount=0, SysStatsUtilizationLoadAvg=0.02, SysStatsCpuCount=8, SysStatsProcessMemoryMB=6847,
+Aug 6 16:40:48 10.34.84.146 Aug 7 00:00:00 stage-pdp02 CISE_System_Statistics 0000002928 1 0 2014-08-07 00:00:00.642 -07:00 0000048587 70001 NOTICE System-Stats: ISE Process Health, ConfigVersionId=10, SysStatsAcsProcessHealth= Database Listener=running\, PID: 16936\; Database Server=running\, number of processes: 35\; Application Server=running\, PID: 22120\; Profiler Database=running\, PID: 20130\; AD Connector=running\, PID: 4257\; M&T Session Database=disabled\; M&T Log Collector=disabled\; M&T Log Processor=disabled\; Certificate Authority Service=running\, PID: 1557\; pxGrid Infrastructure Service=disabled\; pxGrid Publisher Subscriber Service=disabled\; pxGrid Connection Manager=disabled\; pxGrid Controller=disabled\; Identity Mapping Service=disabled,
+Aug 6 16:40:48 10.34.84.146 Aug 7 00:00:00 stage-pdp02 CISE_System_Statistics 0000002929 1 0 2014-08-07 00:00:00.642 -07:00 0000048589 70010 NOTICE System-Stats: OCSP Statistics, ConfigVersionId=10, OCSPPrimaryNotResponsiveCount=Cisco ISE Endpoint Subordinate CA - stage-pdp01:0, OCSPPrimaryNotResponsiveCount=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, OCSPPrimaryNotResponsiveCount=Cisco ISE Root CA - stage-pap02:0, OCSPSecondaryNotResponsiveCount=Cisco ISE Endpoint Subordinate CA - stage-pdp01:0, OCSPSecondaryNotResponsiveCount=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, OCSPSecondaryNotResponsiveCount=Cisco ISE Root CA - stage-pap02:0, OCSPPrimaryCertsGoodCount=Cisco ISE Endpoint Subordinate CA - stage-pdp01:0, OCSPPrimaryCertsGoodCount=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, OCSPPrimaryCertsGoodCount=Cisco ISE Root CA - stage-pap02:0, OCSPSecondaryCertsGoodCount=Cisco ISE Endpoint Subordinate CA - stage-pdp01:0, OCSPSecondaryCertsGoodCount=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, OCSPSecondaryCertsGoodCount=Cisco ISE Root CA - stage-pap02:0, OCSPPrimaryCertsRevokedCount=Cisco ISE Endpoint Subordinate CA - stage-pdp01:0, OCSPPrimaryCertsRevokedCount=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, OCSPPrimaryCertsRevokedCount=Cisco ISE Root CA - stage-pap02:0, OCSPSecondaryCertsRevokedCount=Cisco ISE Endpoint Subordinate CA - stage-pdp01:0, OCSPSecondaryCertsRevokedCount=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, OCSPSecondaryCertsRevokedCount=Cisco ISE Root CA - stage-pap02:0, OCSPPrimaryCertsUnknownCount=Cisco ISE Endpoint Subordinate CA - stage-pdp01:0, OCSPPrimaryCertsUnknownCount=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, OCSPPrimaryCertsUnknownCount=Cisco ISE Root CA - stage-pap02:0, OCSPSecondaryCertsUnknownCount=Cisco ISE Endpoint Subordinate CA - stage-pdp01:0, OCSPSecondaryCertsUnknownCount=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, OCSPSecondaryCertsUnknownCount=Cisco ISE Root CA - stage-pap02:0, OCSPPrimaryCertsFoundCount=Cisco ISE Endpoint Subordinate CA - stage-pdp01:0, OCSPPrimaryCertsFoundCount=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, OCSPPrimaryCertsFoundCount=Cisco ISE Root CA - stage-pap02:0, OCSPSecondaryCertsFoundCount=Cisco ISE Endpoint Subordinate CA - stage-pdp01:0, OCSPSecondaryCertsFoundCount=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, OCSPSecondaryCertsFoundCount=Cisco ISE Root CA - stage-pap02:0, ClearCacheInvokedCount=0, OCSPCertsCleanedUpCount=Cisco ISE Endpoint Subordinate CA - stage-pdp01:1, OCSPCertsCleanedUpCount=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, OCSPCertsCleanedUpCount=Cisco ISE Root CA - stage-pap02:2, NumOfCertsFoundInCache=Cisco ISE Endpoint Subordinate CA - stage-pdp01:0, NumOfCertsFoundInCache=Cisco ISE Endpoint Subordinate CA - stage-pdp02:0, NumOfCertsFoundInCache=Cisco ISE Root CA - stage-pap02:0,
+Aug 6 16:40:48 10.34.84.141 Aug 7 00:00:00 stage-pap01 CISE_Administrative_and_Operational_Audit 0000002645 1 0 2014-08-07 00:00:00.705 -07:00 0000004098 60166 NOTICE Certificate: Certificate will expire soon, ConfigVersionId=146, OperationMessageText= Trust certificate 'Users\,Administrator#ise-WIN-H10SLATQ452-CA#00017' will expire in 12 days,
+Aug 6 16:40:48 10.42.8.41 Aug 7 00:00:00 npf-sjca-pap01 CISE_Administrative_and_Operational_Audit 0000021798 1 0 2014-08-07 00:00:00.930 -07:00 0000030462 60166 NOTICE Certificate: Certificate will expire soon, ConfigVersionId=113, OperationMessageText= Trust certificate 'Users\,Administrator#ise-WIN-H10SLATQ452-CA#00017' will expire in 12 days,
+Aug 6 16:40:50 10.34.84.145 Aug 7 00:00:02 stage-pdp01 CISE_Failed_Attempts 0000024613 1 0 2014-08-07 00:00:02.182 -07:00 0000286998 5413 NOTICE Failed-Attempt: RADIUS Accounting-Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1813, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Called-Station-ID=192.168.30.11, Calling-Station-ID=192.168.30.11, NAS-Identifier=Cisco_1b:e0:84, Acct-Status-Type=Start, Acct-Session-Id=ad:c5:5c:92, Acct-Authentic=RADIUS, AcsSessionID=stage-pdp01/196593288/19315, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11004, Step=11017, Step=11007, Step=5413,
+Aug 6 15:40:50 10.86.237.133 Aug 7 02:00:02 vm4-psn1-if0 CISE_Administrative_and_Operational_Audit 0000002803 1 0 2014-08-07 02:00:02.267 -05:00 0002533404 60134 NOTICE System-Management: DNS Resolution failure, ConfigVersionId=5, AdminInterface=CLI, AdminIPAddress=127.0.0.1, AdminName=system, OperationMessageText=DNS resolution failed for the hostname vm4-psn1-if0.guest.test against the currently configured name servers. Ensure that you have configured a reachable name server using the 'ip name-server <servername>' CLI, AcsInstance=vm4-psn1-if0,
+Aug 6 16:40:52 10.34.84.145 Aug 7 00:00:04 stage-pdp01 CISE_Failed_Attempts 0000024614 1 0 2014-08-07 00:00:04.186 -07:00 0000287002 5413 NOTICE Failed-Attempt: RADIUS Accounting-Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1813, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Called-Station-ID=192.168.30.11, Calling-Station-ID=192.168.30.11, NAS-Identifier=Cisco_1b:e0:84, Acct-Status-Type=Start, Acct-Session-Id=ad:c5:5c:92, Acct-Authentic=RADIUS, AcsSessionID=stage-pdp01/196593288/19316, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11004, Step=11017, Step=11007, Step=5413,
+Aug 6 16:40:52 10.42.7.63 Aug 7 00:00:04 npf-sjca-pdp01 CISE_Passed_Authentications 0001969823 1 0 2014-08-07 00:00:04.338 -07:00 0098648223 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=58, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AEF6C76B9093, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2084825, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AEF6C76B9093, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AEF6C76B9093; Class=CACS:0A2250250007AEF6C76B9093:npf-sjca-pdp01/195491152/2084825; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AEF6C76B9093&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=47ab1ee8a5eeb1d37d3194083abfeaa4; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:40:52 10.42.7.64 Aug 7 00:00:04 npf-sjca-pdp02 CISE_RADIUS_Diagnostics 0000370854 1 0 2014-08-07 00:00:04.526 -07:00 0011266583 11302 WARN RADIUS: Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=23, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/270932, SelectedAccessService=NDAC_SGT_Service, CTSRequest=true, CPMSessionID=0a2a0740000056EF53E323F4,
+Aug 6 16:40:52 10.42.7.64 Aug 7 00:00:04 npf-sjca-pdp02 CISE_Failed_Attempts 0000370855 1 0 2014-08-07 00:00:04.527 -07:00 0011266584 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=240, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.64, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=5, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp02/195481465/270932, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a0740000056EF53E323F4, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:40:52 10.42.7.63 Aug 7 00:00:04 npf-sjca-pdp01 CISE_RADIUS_Accounting 0001969824 1 0 2014-08-07 00:00:04.709 -07:00 0098648235 3002 NOTICE Radius-Accounting: RADIUS Accounting watchdog update, ConfigVersionId=133, Device IP Address=171.70.35.131, RequestLatency=3, NetworkDeviceName=WNBU-sjc14-00a-homeap1, User-Name=host/MBAGAWAT-WS02.cisco.com, NAS-IP-Address=171.70.35.131, NAS-Port=13, Framed-IP-Address=10.33.116.49, Class=CACS:0/fe6c54/ab462383/13, Called-Station-ID=00-3a-9b-03-18-80, Calling-Station-ID=24-77-03-6e-1d-cc, NAS-Identifier=Cisco_7d:88:00, Acct-Status-Type=Interim-Update, Acct-Delay-Time=0, Acct-Input-Octets=82225000, Acct-Output-Octets=1211191000, Acct-Session-Id=53e2c1bd/24:77:03:6e:1d:cc/11615, Acct-Authentic=RADIUS, Acct-Session-Time=25145, Acct-Input-Packets=587146, Acct-Output-Packets=989725, undefined-52=
+Aug 6 16:40:53 10.42.8.42 Aug 7 00:00:04 npf-sjca-pap02 CISE_System_Statistics 0000011993 1 0 2014-08-07 00:00:04.979 -07:00 0000013727 70000 NOTICE System-Stats: ISE Utilization, ConfigVersionId=113, SysStatsUtilizationCpu=0.83%, SysStatsUtilizationNetwork=eth0: rcvd = 258326\; sent = 145595 \;rcvd_dropped = 0\; sent_dropped = 0, SysStatsUtilizationMemory=42.92%, SysStatsUtilizationDiskIO=0.15%, SysStatsUtilizationDiskSpace=18% /, SysStatsUtilizationDiskSpace=10% /boot, SysStatsUtilizationDiskSpace=2% /localdisk, SysStatsUtilizationDiskSpace=7% /storedconfig, SysStatsUtilizationDiskSpace=2% /tmp, AverageRadiusRequestLatency=0, AverageTacacsRequestLatency=0, DeltaRadiusRequestCount=0, DeltaTacacsRequestCount=0, SysStatsUtilizationLoadAvg=0.02, SysStatsCpuCount=4, SysStatsProcessMemoryMB=4945,
+Aug 6 16:40:53 10.42.8.42 Aug 7 00:00:04 npf-sjca-pap02 CISE_System_Statistics 0000011994 1 0 2014-08-07 00:00:04.979 -07:00 0000013726 70001 NOTICE System-Stats: ISE Process Health, ConfigVersionId=113, SysStatsAcsProcessHealth= Database Listener=running\, PID: 29446\; Database Server=running\, number of processes: 25\; Application Server=running\, PID: 32615\; Profiler Database=running\, PID: 19953\; AD Connector=running\, PID: 4303\; M&T Session Database=disabled\; M&T Log Collector=disabled\; M&T Log Processor=disabled\; Certificate Authority Service=disabled\; pxGrid Infrastructure Service=disabled\; pxGrid Publisher Subscriber Service=disabled\; pxGrid Connection Manager=disabled\; pxGrid Controller=disabled\; Identity Mapping Service=disabled,
+Aug 6 16:40:53 10.42.7.63 Aug 7 00:00:05 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969825 1 0 2014-08-07 00:00:05.885 -07:00 0098648300 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=10.34.150.68, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=57, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22964453e3252e00000d69\;42SessionID=npf-sjca-pdp01/195491152/2084820\;, Called-Station-ID=64-d9-89-42-21-00:alpha_phone, Calling-Station-ID=00-23-33-41-D7-93, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e3252e00000d69, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084820, SelectedAccessService=Default Network Access, DetailedInfo=Invalid username or password specified\, Retry is allowed, EapTunnel=EAP-FAST, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0a22964453e3252e00000d69,
+Aug 6 16:40:54 10.42.7.63 Aug 7 00:00:06 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969826 1 0 2014-08-07 00:00:06.963 -07:00 0098648437 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=10.34.150.68, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=66, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22964453e3252f00000d6a\;42SessionID=npf-sjca-pdp01/195491152/2084821\;, Called-Station-ID=64-d9-89-42-21-00:alpha_phone, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e3252f00000d6a, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084821, SelectedAccessService=Default Network Access, DetailedInfo=Invalid username or password specified\, Retry is allowed, EapTunnel=EAP-FAST, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0a22964453e3252f00000d6a,
+Aug 6 16:40:55 10.42.7.63 Aug 7 00:00:07 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969827 1 0 2014-08-07 00:00:07.893 -07:00 0098648497 12932 WARN Failed-Attempt: Supplicant stopped responding to ISE after sending it the first EAP-FAST message, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084583, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-6A-A9, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22964453e324bb00000d5f,
+Aug 6 16:40:55 10.42.7.63 Aug 7 00:00:07 npf-sjca-pdp01 CISE_Failed_Attempts 0001969828 1 0 2014-08-07 00:00:07.893 -07:00 0098648498 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084583, SelectedAccessService=Default Network Access, FailureReason=12932 Supplicant stopped responding to ISE after sending it the first EAP-FAST message, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=12932, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-6A-A9, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap7, CPMSessionID=0a22964453e324bb00000d5f, EndPointMACAddress=00-23-33-41-6A-A9, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=20=120001, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:40:56 10.42.7.63 Aug 7 00:00:08 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969829 1 0 2014-08-07 00:00:08.417 -07:00 0098648499 12932 WARN Failed-Attempt: Supplicant stopped responding to ISE after sending it the first EAP-FAST message, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084585, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-6A-A9, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22964453e324bb00000d5f,
+Aug 6 16:40:56 10.42.7.63 Aug 7 00:00:08 npf-sjca-pdp01 CISE_Failed_Attempts 0001969830 1 0 2014-08-07 00:00:08.417 -07:00 0098648500 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084585, SelectedAccessService=Default Network Access, FailureReason=12932 Supplicant stopped responding to ISE after sending it the first EAP-FAST message, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=12932, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-6A-A9, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap7, CPMSessionID=0a22964453e324bb00000d5f, EndPointMACAddress=00-23-33-41-6A-A9, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=20=120001, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:40:57 10.42.7.63 Aug 7 00:00:09 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969831 1 0 2014-08-07 00:00:09.004 -07:00 0098648505 12932 WARN Failed-Attempt: Supplicant stopped responding to ISE after sending it the first EAP-FAST message, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084588, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-6A-A9, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22964453e324bb00000d5f,
+Aug 6 16:40:57 10.42.7.63 Aug 7 00:00:09 npf-sjca-pdp01 CISE_Failed_Attempts 0001969832 1 0 2014-08-07 00:00:09.004 -07:00 0098648506 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084588, SelectedAccessService=Default Network Access, FailureReason=12932 Supplicant stopped responding to ISE after sending it the first EAP-FAST message, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=12932, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-6A-A9, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap7, CPMSessionID=0a22964453e324bb00000d5f, EndPointMACAddress=00-23-33-41-6A-A9, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=20=120000, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:40:57 10.42.7.63 Aug 7 00:00:09 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969833 1 0 2014-08-07 00:00:09.568 -07:00 0098648518 11302 WARN RADIUS: Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=23, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2084839, SelectedAccessService=NDAC_SGT_Service, CTSRequest=true, CPMSessionID=0a2a073f00005D4A53E323F9,
+Aug 6 16:40:57 10.42.7.63 Aug 7 00:00:09 npf-sjca-pdp01 CISE_Failed_Attempts 0001969834 1 0 2014-08-07 00:00:09.568 -07:00 0098648519 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=133, Device IP Address=10.56.72.126, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=#CTSREQUEST#, Protocol=Radius, RequestLatency=2, NetworkDeviceName=ntn01-11a-sw3, User-Name=#CTSREQUEST#, NAS-IP-Address=10.56.72.126, Service-Type=Outbound, AcsSessionID=npf-sjca-pdp01/195491152/2084839, SelectedAccessService=NDAC_SGT_Service, FailureReason=11302 Received Secure RADIUS request without a cts-pac-opaque cisco-av-pair attribute, Step=11001, Step=11017, Step=15012, Step=11302, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, CPMSessionID=0a2a073f00005D4A53E323F9, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, Response={RadiusPacketType=Drop; },
+Aug 6 16:40:57 10.42.7.63 Aug 7 00:00:09 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969835 1 0 2014-08-07 00:00:09.779 -07:00 0098648583 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=10.34.149.5, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=59, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22950553e3222a00007ec2\;42SessionID=npf-sjca-pdp01/195491152/2084830\;, Called-Station-ID=64-d9-89-42-20-20:alpha_phone, Calling-Station-ID=00-23-33-41-D7-93, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22950553e3222a00007ec2, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084830, SelectedAccessService=Default Network Access, DetailedInfo=Invalid username or password specified\, Retry is allowed, EapTunnel=EAP-FAST, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0a22950553e3222a00007ec2,
+Aug 6 16:40:58 10.42.7.63 Aug 7 00:00:10 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969836 1 0 2014-08-07 00:00:10.954 -07:00 0098648718 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=10.34.149.5, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=69, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22950553e3214500007ec0\;42SessionID=npf-sjca-pdp01/195491152/2084832\;, Called-Station-ID=64-d9-89-42-20-20:alpha_phone, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22950553e3214500007ec0, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084832, SelectedAccessService=Default Network Access, DetailedInfo=Invalid username or password specified\, Retry is allowed, EapTunnel=EAP-FAST, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0a22950553e3214500007ec0,
+Aug 6 16:40:59 10.42.7.63 Aug 7 00:00:11 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969837 1 0 2014-08-07 00:00:11.056 -07:00 0098648728 12932 WARN Failed-Attempt: Supplicant stopped responding to ISE after sending it the first EAP-FAST message, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084599, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-D7-93, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22964453e324bb00000d5e,
+Aug 6 16:40:59 10.42.7.63 Aug 7 00:00:11 npf-sjca-pdp01 CISE_Failed_Attempts 0001969838 1 0 2014-08-07 00:00:11.057 -07:00 0098648729 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084599, SelectedAccessService=Default Network Access, FailureReason=12932 Supplicant stopped responding to ISE after sending it the first EAP-FAST message, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=12932, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-D7-93, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap4, CPMSessionID=0a22964453e324bb00000d5e, EndPointMACAddress=00-23-33-41-D7-93, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=20=120000, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:40:59 10.42.7.64 Aug 7 00:00:11 npf-sjca-pdp02 CISE_Passed_Authentications 0000370856 1 0 2014-08-07 00:00:11.093 -07:00 0011266671 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.34.76.212, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=maswank, Protocol=Radius, RequestLatency=43, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=maswank, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a224cd40002fdef53e323ef\;41SessionID=npf-sjca-pdp02/195481465/270933\;, Called-Station-ID=a4-56-30-0f-78-80:alpha_example, Calling-Station-ID=00-21-6a-ab-3a-fe, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 601, undefined-89=
+Aug 6 16:40:59 10.42.7.64 Aug 7 00:00:11 npf-sjca-pdp02 CISE_RADIUS_Accounting 0000370857 1 0 2014-08-07 00:00:11.127 -07:00 0011266678 3002 NOTICE Radius-Accounting: RADIUS Accounting watchdog update, ConfigVersionId=240, Device IP Address=10.34.76.212, RequestLatency=30, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=maswank, NAS-IP-Address=10.34.76.212, NAS-Port=1, Class=CACS:0a224cd40002fdef53e323ef:npf-sjca-pdp02/195481465/270933, Called-Station-ID=88-43-e1-62-1d-20, Calling-Station-ID=00-21-6a-ab-3a-fe, NAS-Identifier=sjcm-00a-npf-wlc1, Acct-Status-Type=Interim-Update, Acct-Delay-Time=0, Acct-Input-Octets=0, Acct-Output-Octets=0, Acct-Session-Id=53e323f0/00:21:6a:ab:3a:fe/174396, Acct-Authentic=RADIUS, Acct-Session-Time=10, Acct-Input-Packets=0, Acct-Output-Packets=0, undefined-52=
+Aug 6 16:41:00 10.42.7.63 Aug 7 00:00:12 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969839 1 0 2014-08-07 00:00:12.104 -07:00 0098648760 12932 WARN Failed-Attempt: Supplicant stopped responding to ISE after sending it the first EAP-FAST message, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084603, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22964453e324bc00000d60,
+Aug 6 16:41:00 10.42.7.63 Aug 7 00:00:12 npf-sjca-pdp01 CISE_Failed_Attempts 0001969840 1 0 2014-08-07 00:00:12.104 -07:00 0098648761 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084603, SelectedAccessService=Default Network Access, FailureReason=12932 Supplicant stopped responding to ISE after sending it the first EAP-FAST message, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=12932, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap4, CPMSessionID=0a22964453e324bc00000d60, EndPointMACAddress=00-23-33-41-78-96, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=20=120001, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:41:02 10.86.102.144 Aug 7 03:00:14 bxb22-11a-pdp1 CISE_System_Statistics 0000049401 1 0 2014-08-07 03:00:14.002 -04:00 0001380293 70000 NOTICE System-Stats: ISE Utilization, ConfigVersionId=76, SysStatsUtilizationCpu=0.77%, SysStatsUtilizationNetwork=eth0: rcvd = 304249\; sent = 161666 \;rcvd_dropped = 0\; sent_dropped = 0, SysStatsUtilizationMemory=30.98%, SysStatsUtilizationDiskIO=0.19%, SysStatsUtilizationDiskSpace=6% /, SysStatsUtilizationDiskSpace=8% /boot, SysStatsUtilizationDiskSpace=2% /localdisk, SysStatsUtilizationDiskSpace=7% /storedconfig, SysStatsUtilizationDiskSpace=2% /tmp, AverageRadiusRequestLatency=0, AverageTacacsRequestLatency=0, DeltaRadiusRequestCount=0, DeltaTacacsRequestCount=0, SysStatsUtilizationLoadAvg=0.04, SysStatsCpuCount=8, SysStatsProcessMemoryMB=14289,
+Aug 6 16:41:02 10.86.102.144 Aug 7 03:00:14 bxb22-11a-pdp1 CISE_System_Statistics 0000049402 1 0 2014-08-07 03:00:14.002 -04:00 0001380294 70001 NOTICE System-Stats: ISE Process Health, ConfigVersionId=76, SysStatsAcsProcessHealth= Database Listener=running\, PID: 29433\; Database Server=running\, number of processes: 25\; Application Server=running\, PID: 473\; Profiler Database=running\, PID: 596\; AD Connector=running\, PID: 7728\; M&T Session Database=disabled\; M&T Log Collector=disabled\; M&T Log Processor=disabled\; Certificate Authority Service=running\, PID: 6175\; pxGrid Infrastructure Service=disabled\; pxGrid Publisher Subscriber Service=disabled\; pxGrid Connection Manager=disabled\; pxGrid Controller=disabled\; Identity Mapping Service=disabled,
+Aug 6 16:41:02 10.42.7.63 Aug 7 00:00:14 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969841 1 0 2014-08-07 00:00:14.776 -07:00 0098648939 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=10.34.149.5, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=84, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22950553e3214500007ec0\;42SessionID=npf-sjca-pdp01/195491152/2084848\;, Called-Station-ID=64-d9-89-42-22-b0:alpha_phone, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22950553e3214500007ec0, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084848, SelectedAccessService=Default Network Access, DetailedInfo=Invalid username or password specified\, Retry is allowed, EapTunnel=EAP-FAST, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0a22950553e3214500007ec0,
+Aug 6 16:41:02 10.42.7.63 Aug 7 00:00:14 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969842 1 0 2014-08-07 00:00:14.873 -07:00 0098649040 12853 WARN EAP: Empty EAP-GTC message received, ConfigVersionId=133, Device IP Address=10.34.150.68, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=89, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22964453e3253a00000d6d\;42SessionID=npf-sjca-pdp01/195491152/2084859\;, Called-Station-ID=3c-08-f6-59-0e-10:alpha_phone, Calling-Station-ID=00-23-33-41-AD-A3, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e3253a00000d6d, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084859, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=0a22964453e3253a00000d6d,
+Aug 6 16:41:02 10.42.7.63 Aug 7 00:00:14 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969843 1 0 2014-08-07 00:00:14.873 -07:00 0098649042 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=10.34.150.68, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=89, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22964453e3253a00000d6d\;42SessionID=npf-sjca-pdp01/195491152/2084859\;, Called-Station-ID=3c-08-f6-59-0e-10:alpha_phone, Calling-Station-ID=00-23-33-41-AD-A3, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e3253a00000d6d, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084859, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=0a22964453e3253a00000d6d,
+Aug 6 16:41:02 10.42.7.63 Aug 7 00:00:14 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969844 1 0 2014-08-07 00:00:14.874 -07:00 0098649047 12932 WARN Failed-Attempt: Supplicant stopped responding to ISE after sending it the first EAP-FAST message, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084608, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-D7-93, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22950553e3222a00007ec2,
+Aug 6 16:41:02 10.42.7.63 Aug 7 00:00:14 npf-sjca-pdp01 CISE_Failed_Attempts 0001969845 1 0 2014-08-07 00:00:14.874 -07:00 0098649048 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084608, SelectedAccessService=Default Network Access, FailureReason=12932 Supplicant stopped responding to ISE after sending it the first EAP-FAST message, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=12932, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-D7-93, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap3, CPMSessionID=0a22950553e3222a00007ec2, EndPointMACAddress=00-23-33-41-D7-93, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=20=120001, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:41:03 10.42.7.64 Aug 7 00:00:15 npf-sjca-pdp02 CISE_RADIUS_Accounting 0000370858 1 0 2014-08-07 00:00:15.120 -07:00 0011266686 3001 NOTICE Radius-Accounting: RADIUS Accounting stop request, ConfigVersionId=240, Device IP Address=10.56.129.4, RequestLatency=32, NetworkDeviceName=NTN-WLC1, User-Name=98-D6-F7-5E-67-1E, NAS-IP-Address=10.56.129.4, NAS-Port=1, Framed-IP-Address=10.56.129.30, Class=CACS:0a388104000045cf53e2beda:npf-sjca-pdp02/195481465/270922, Called-Station-ID=6c-41-6a-5f-6e-c0, Calling-Station-ID=98-d6-f7-5e-67-1e, NAS-Identifier=ntn01-11a-wlc1, Acct-Status-Type=Stop, Acct-Delay-Time=0, Acct-Input-Octets=82454, Acct-Output-Octets=86377, Acct-Session-Id=53e2bedc/98:d6:f7:5e:67:1e/13845, Acct-Authentic=RADIUS, Acct-Session-Time=1192, Acct-Input-Packets=427, Acct-Output-Packets=233, Acct-Terminate-Cause=Idle Timeout, undefined-52=
+Aug 6 16:41:03 10.42.7.63 Aug 7 00:00:15 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969846 1 0 2014-08-07 00:00:15.923 -07:00 0098649220 12853 WARN EAP: Empty EAP-GTC message received, ConfigVersionId=133, Device IP Address=171.70.35.137, Device Port=32770, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=0, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055ab8f1ae353\;42SessionID=npf-sjca-pdp01/195491152/2084866\;, Called-Station-ID=ec447680bc70:alpha_phone, Calling-Station-ID=30f70d4d201d, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, cisco-av-pair=audit-session-id=892346ab000055ab8f1ae353, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084866, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=892346ab000055ab8f1ae353,
+Aug 6 16:41:03 10.42.7.63 Aug 7 00:00:15 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969847 1 0 2014-08-07 00:00:15.923 -07:00 0098649222 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=171.70.35.137, Device Port=32770, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=0, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055ab8f1ae353\;42SessionID=npf-sjca-pdp01/195491152/2084866\;, Called-Station-ID=ec447680bc70:alpha_phone, Calling-Station-ID=30f70d4d201d, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, cisco-av-pair=audit-session-id=892346ab000055ab8f1ae353, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084866, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=892346ab000055ab8f1ae353,
+Aug 6 16:41:03 10.42.7.63 Aug 7 00:00:15 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969848 1 0 2014-08-07 00:00:15.958 -07:00 0098649232 12930 WARN Failed-Attempt: Supplicant stopped responding to ISE after sending it the first PEAP message, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084610, SelectedAccessService=Default Network Access, EapTunnel=PEAP, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22950553e3214500007ec0,
+Aug 6 16:41:03 10.42.7.63 Aug 7 00:00:15 npf-sjca-pdp01 CISE_Failed_Attempts 0001969849 1 0 2014-08-07 00:00:15.959 -07:00 0098649233 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084610, SelectedAccessService=Default Network Access, FailureReason=12930 Supplicant stopped responding to ISE after sending it the first PEAP message, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=12930, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=PEAP, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap3, CPMSessionID=0a22950553e3214500007ec0, EndPointMACAddress=00-23-33-41-78-96, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=14=120000, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:41:04 10.42.7.63 Aug 7 00:00:16 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969850 1 0 2014-08-07 00:00:16.678 -07:00 0098649417 12853 WARN EAP: Empty EAP-GTC message received, ConfigVersionId=133, Device IP Address=171.70.35.137, Device Port=32770, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=9, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055ab8f1ae353\;42SessionID=npf-sjca-pdp01/195491152/2084867\;, Called-Station-ID=ec447680bc70:alpha_phone, Calling-Station-ID=30f70d4d201d, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, cisco-av-pair=audit-session-id=892346ab000055ab8f1ae353, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084867, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=892346ab000055ab8f1ae353,
+Aug 6 16:41:04 10.42.7.63 Aug 7 00:00:16 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969851 1 0 2014-08-07 00:00:16.678 -07:00 0098649419 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=171.70.35.137, Device Port=32770, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=9, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055ab8f1ae353\;42SessionID=npf-sjca-pdp01/195491152/2084867\;, Called-Station-ID=ec447680bc70:alpha_phone, Calling-Station-ID=30f70d4d201d, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, cisco-av-pair=audit-session-id=892346ab000055ab8f1ae353, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084867, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=892346ab000055ab8f1ae353,
+Aug 6 16:41:04 10.42.7.63 Aug 7 00:00:16 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969852 1 0 2014-08-07 00:00:16.697 -07:00 0098649435 12853 WARN EAP: Empty EAP-GTC message received, ConfigVersionId=133, Device IP Address=10.34.150.68, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=102, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22964453e324d700000d64\;42SessionID=npf-sjca-pdp01/195491152/2084868\;, Called-Station-ID=3c-08-f6-59-0e-10:alpha_phone, Calling-Station-ID=00-23-33-41-60-52, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e324d700000d64, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084868, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=0a22964453e324d700000d64,
+Aug 6 16:41:04 10.42.7.63 Aug 7 00:00:16 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969853 1 0 2014-08-07 00:00:16.697 -07:00 0098649437 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=10.34.150.68, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=102, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22964453e324d700000d64\;42SessionID=npf-sjca-pdp01/195491152/2084868\;, Called-Station-ID=3c-08-f6-59-0e-10:alpha_phone, Calling-Station-ID=00-23-33-41-60-52, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e324d700000d64, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084868, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=0a22964453e324d700000d64,
+Aug 6 16:41:04 10.42.7.63 Aug 7 00:00:16 npf-sjca-pdp01 CISE_Failed_Attempts 0001969854 1 0 2014-08-07 00:00:16.712 -07:00 0098649452 5434 NOTICE RADIUS: Endpoint conducted several failed authentications of the same scenario, ConfigVersionId=133, Device IP Address=10.34.150.68, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, UserName=pnirala, Protocol=Radius, NetworkDeviceName=EXAMPLE, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22964453e324d700000d64\;42SessionID=npf-sjca-pdp01/195491152/2084868\;, Called-Station-ID=3c-08-f6-59-0e-10:alpha_phone, Calling-Station-ID=00-23-33-41-60-52, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap7, EAP-Key-Name=, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e324d700000d64, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, IsEndpointInRejectMode=false, AcsSessionID=npf-sjca-pdp01/195491152/2084868, AuthenticationIdentityStore=CiscoAD, AuthenticationMethod=PAP_ASCII, SelectedAccessService=Default Network Access, FailureReason=24408 User authentication against Active Directory failed since user has entered the wrong password, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=11001, Step=11018, Step=12102, Step=12800, Step=12175, Step=12805, Step=12806, Step=12801, Step=12802, Step=12105, Step=11006, Step=11001, Step=11018, Step=12104, Step=12804, Step=12816, Step=12132, Step=12209, Step=12218, Step=12125, Step=11521, Step=12105, Step=11006, Step=11001, Step=11018, Step=12104, Step=12220, Step=11522, Step=11806, Step=12105, Step=11006, Step=11001, Step=11018, Step=12104, Step=12607, Step=12606, Step=12611, Step=15041, Step=15006, Step=22072, Step=15013, Step=12606, Step=12105, Step=11006, Step=11001, Step=11018, Step=12104, Step=12610, Step=15041, Step=15004, Step=15006, Step=22072, Step=15013, Step=24430, Step=24325, Step=24313, Step=24319, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24323, Step=24344, Step=24408, Step=22057, Step=22061, Step=12610, Step=12105, Step=11006, Step=11001, Step=11018, Step=12104, Step=12610, Step=12853, Step=11520, Step=12117, Step=22028, Step=12965, Step=12105, Step=11006, Step=11001, Step=11018, Step=12104, Step=11504, Step=11003, Step=5434, SelectedAuthenticationIdentityStores=CiscoAD, SelectedAuthenticationIdentityStores=Internal Endpoints, SelectedAuthenticationIdentityStores=Internal Users, SelectedAuthenticationIdentityStores=Guest Users, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=0a22964453e324d700000d64, EndPointMACAddress=00-23-33-41-60-52, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, IdentitySelectionMatchedRule=Default, TotalFailedAttempts=12987, TotalFailedTime=310509, AD-Domain=cisco.com, AD-User-Candidate-Identities=pnirala@cisco.com, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, StepData=59=EAP_TLS_BYOD, StepData=60=CiscoAD, StepData=69=Default, StepData=71=EAP_TLS_BYOD, StepData=72=CiscoAD, StepData=73=CiscoAD, StepData=74=pnirala, StepData=75=cisco.com, StepData=76=cisco.com, StepData=77=icm.cisco.com\,Domain trust direction is one-way, StepData=78=sea-alpha.cisco.com\,Domain trust direction is one-way, StepData=79=partnet.cisco.com\,Domain trust direction is one-way, StepData=80=IL.NDS.COM\,Domain trust direction is one-way, StepData=81=UK.NDS.COM\,Domain trust direction is one-way, StepData=82=SN.local\,Domain trust direction is one-way, StepData=83=webex.local\,Domain trust direction is one-way, StepData=84=in.nds.com\,Domain trust direction is one-way, StepData=85=US.NDS.COM\,Domain trust direction is one-way, StepData=87=STATUS_WRONG_PASSWORD\,ERROR_INVALID_PASSWORD\,pnirala@cisco.com, StepData=88=CiscoAD, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC, Response={RadiusPacketType=AccessReject; },
+Aug 6 16:41:05 10.42.7.63 Aug 7 00:00:17 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969855 1 0 2014-08-07 00:00:17.100 -07:00 0098649536 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=171.70.35.137, Device Port=32770, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=15, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f1fd23e353\;42SessionID=npf-sjca-pdp01/195491152/2084849\;, Called-Station-ID=002333c45b90:alpha_phone, Calling-Station-ID=0018ba78c59d, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, cisco-av-pair=audit-session-id=892346ab000055f1fd23e353, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084849, SelectedAccessService=Default Network Access, DetailedInfo=Invalid username or password specified\, Retry is allowed, EapTunnel=EAP-FAST, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=892346ab000055f1fd23e353,
+Aug 6 16:41:05 10.42.7.63 Aug 7 00:00:17 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969856 1 0 2014-08-07 00:00:17.263 -07:00 0098649644 12853 WARN EAP: Empty EAP-GTC message received, ConfigVersionId=133, Device IP Address=10.34.150.68, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=113, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22964453e324d700000d64\;42SessionID=npf-sjca-pdp01/195491152/2084870\;, Called-Station-ID=3c-08-f6-59-0e-10:alpha_phone, Calling-Station-ID=00-23-33-41-60-52, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e324d700000d64, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084870, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=0a22964453e324d700000d64,
+Aug 6 16:41:05 10.42.7.63 Aug 7 00:00:17 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969857 1 0 2014-08-07 00:00:17.263 -07:00 0098649646 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=10.34.150.68, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=113, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22964453e324d700000d64\;42SessionID=npf-sjca-pdp01/195491152/2084870\;, Called-Station-ID=3c-08-f6-59-0e-10:alpha_phone, Calling-Station-ID=00-23-33-41-60-52, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e324d700000d64, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084870, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=0a22964453e324d700000d64,
+Aug 6 16:41:05 10.42.7.63 Aug 7 00:00:17 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969858 1 0 2014-08-07 00:00:17.840 -07:00 0098649841 12853 WARN EAP: Empty EAP-GTC message received, ConfigVersionId=133, Device IP Address=10.34.150.68, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=125, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22964453e324d700000d64\;42SessionID=npf-sjca-pdp01/195491152/2084873\;, Called-Station-ID=3c-08-f6-59-0e-10:alpha_phone, Calling-Station-ID=00-23-33-41-60-52, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e324d700000d64, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084873, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=0a22964453e324d700000d64,
+Aug 6 16:41:05 10.42.7.63 Aug 7 00:00:17 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969859 1 0 2014-08-07 00:00:17.841 -07:00 0098649843 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=10.34.150.68, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=125, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22964453e324d700000d64\;42SessionID=npf-sjca-pdp01/195491152/2084873\;, Called-Station-ID=3c-08-f6-59-0e-10:alpha_phone, Calling-Station-ID=00-23-33-41-60-52, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e324d700000d64, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084873, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, CPMSessionID=0a22964453e324d700000d64,
+Aug 6 16:41:05 10.42.7.63 Aug 7 00:00:17 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969860 1 0 2014-08-07 00:00:17.954 -07:00 0098649912 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=171.70.35.137, Device Port=32770, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=26, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000054ed0a09e353\;42SessionID=npf-sjca-pdp01/195491152/2084852\;, Called-Station-ID=0023045b8cb0:alpha_phone, Calling-Station-ID=0026cb006125, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, cisco-av-pair=audit-session-id=892346ab000054ed0a09e353, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084852, SelectedAccessService=Default Network Access, DetailedInfo=Invalid username or password specified\, Retry is allowed, EapTunnel=EAP-FAST, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=892346ab000054ed0a09e353,
+Aug 6 16:41:06 10.42.7.63 Aug 7 00:00:18 npf-sjca-pdp01 CISE_Passed_Authentications 0001969861 1 0 2014-08-07 00:00:18.392 -07:00 0098650111 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=mkrummen, Protocol=Radius, RequestLatency=30, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000054f03809e353\;42SessionID=npf-sjca-pdp01/195491152/2084875\;, Called-Station-ID=0024c48d6e40:alpha_phone, Calling-Station-ID=001f9e8b6c9f, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:41:06 10.42.7.63 Aug 7 00:00:18 npf-sjca-pdp01 CISE_RADIUS_Accounting 0001969862 1 0 2014-08-07 00:00:18.465 -07:00 0098650132 3002 NOTICE Radius-Accounting: RADIUS Accounting watchdog update, ConfigVersionId=133, Device IP Address=171.70.35.137, RequestLatency=2, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=mkrummen, NAS-IP-Address=171.70.35.137, NAS-Port=1, Framed-IP-Address=10.33.117.7, Class=CACS:892346ab000054f03809e353:npf-sjca-pdp01/195491152/2084875, Called-Station-ID=00-24-c4-8d-6e-40, Calling-Station-ID=00-1f-9e-8b-6c-9f, NAS-Identifier=Cisco_cf:27:46, Acct-Status-Type=Interim-Update, Acct-Delay-Time=0, Acct-Input-Octets=0, Acct-Output-Octets=0, Acct-Session-Id=53e3093b/00:1f:9e:8b:6c:9f/12103, Acct-Authentic=RADIUS, Acct-Session-Time=6856, Acct-Input-Packets=0, Acct-Output-Packets=0, undefined-52=
+Aug 6 16:41:06 10.42.7.63 Aug 7 00:00:18 npf-sjca-pdp01 CISE_Passed_Authentications 0001969863 1 0 2014-08-07 00:00:18.485 -07:00 0098650153 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=frsung, Protocol=Radius, RequestLatency=26, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=frsung, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f20124e353\;42SessionID=npf-sjca-pdp01/195491152/2084874\;, Called-Station-ID=0026cbba9070:alpha, Calling-Station-ID=10683f75350c, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:41:06 10.42.7.63 Aug 7 00:00:18 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969864 1 0 2014-08-07 00:00:18.634 -07:00 0098650217 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=10.34.149.5, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=95, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22950553e3214500007ec0\;42SessionID=npf-sjca-pdp01/195491152/2084864\;, Called-Station-ID=64-d9-89-42-1e-80:alpha_phone, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22950553e3214500007ec0, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084864, SelectedAccessService=Default Network Access, DetailedInfo=Invalid username or password specified\, Retry is allowed, EapTunnel=EAP-FAST, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0a22950553e3214500007ec0,
+Aug 6 16:41:06 10.42.7.63 Aug 7 00:00:18 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969865 1 0 2014-08-07 00:00:18.975 -07:00 0098650247 12932 WARN Failed-Attempt: Supplicant stopped responding to ISE after sending it the first EAP-FAST message, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084616, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-D7-93, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22950553e3222a00007ec2,
+Aug 6 16:41:06 10.42.7.63 Aug 7 00:00:18 npf-sjca-pdp01 CISE_Failed_Attempts 0001969866 1 0 2014-08-07 00:00:18.976 -07:00 0098650248 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084616, SelectedAccessService=Default Network Access, FailureReason=12932 Supplicant stopped responding to ISE after sending it the first EAP-FAST message, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=12932, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-D7-93, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap2, CPMSessionID=0a22950553e3222a00007ec2, EndPointMACAddress=00-23-33-41-D7-93, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=20=120000, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:41:07 10.42.7.63 Aug 7 00:00:19 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969867 1 0 2014-08-07 00:00:19.370 -07:00 0098650287 12933 WARN Failed-Attempt: Supplicant stopped responding to ISE during EAP-FAST tunnel establishment, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084624, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-AD-A3, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22964453e324c700000d62,
+Aug 6 16:41:07 10.42.7.63 Aug 7 00:00:19 npf-sjca-pdp01 CISE_Failed_Attempts 0001969868 1 0 2014-08-07 00:00:19.371 -07:00 0098650288 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084624, SelectedAccessService=Default Network Access, FailureReason=12933 Supplicant stopped responding to ISE during EAP-FAST tunnel establishment, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=11001, Step=11018, Step=12102, Step=12800, Step=12175, Step=12805, Step=12806, Step=12801, Step=12802, Step=12105, Step=11006, Step=12933, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-AD-A3, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap7, CPMSessionID=0a22964453e324c700000d62, EndPointMACAddress=00-23-33-41-AD-A3, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=31=120000, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:41:07 10.42.7.63 Aug 7 00:00:19 npf-sjca-pdp01 CISE_RADIUS_Accounting 0001969869 1 0 2014-08-07 00:00:19.485 -07:00 0098650295 3001 NOTICE Radius-Accounting: RADIUS Accounting stop request, ConfigVersionId=133, Device IP Address=171.70.35.137, RequestLatency=2, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=bbobinde, NAS-IP-Address=171.70.35.137, NAS-Port=1, Framed-IP-Address=10.33.249.75, Class=CACS:892346ab000055eaa422e353:npf-sjca-pdp01/195491152/2084126, Called-Station-ID=ec-44-76-80-bc-70, Calling-Station-ID=94-94-26-07-19-b4, NAS-Identifier=Cisco_cf:27:46, Acct-Status-Type=Stop, Acct-Delay-Time=0, Acct-Input-Octets=24601, Acct-Output-Octets=210110, Acct-Session-Id=53e322a6/94:94:26:07:19:b4/12257, Acct-Authentic=RADIUS, Acct-Session-Time=349, Acct-Input-Packets=281, Acct-Output-Packets=353, Acct-Terminate-Cause=Idle Timeout, undefined-52=
+Aug 6 16:41:07 10.42.7.63 Aug 7 00:00:19 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969870 1 0 2014-08-07 00:00:19.838 -07:00 0098650301 12933 WARN Failed-Attempt: Supplicant stopped responding to ISE during EAP-FAST tunnel establishment, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084625, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22950553e3214500007ec0,
+Aug 6 16:41:07 10.42.7.63 Aug 7 00:00:19 npf-sjca-pdp01 CISE_Failed_Attempts 0001969871 1 0 2014-08-07 00:00:19.838 -07:00 0098650302 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084625, SelectedAccessService=Default Network Access, FailureReason=12933 Supplicant stopped responding to ISE during EAP-FAST tunnel establishment, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=11001, Step=11018, Step=12102, Step=12800, Step=12805, Step=12806, Step=12808, Step=12810, Step=12105, Step=11006, Step=12933, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap2, CPMSessionID=0a22950553e3214500007ec0, EndPointMACAddress=00-23-33-41-78-96, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=30=120001, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:41:08 10.42.7.63 Aug 7 00:00:20 npf-sjca-pdp01 CISE_RADIUS_Accounting 0001969872 1 0 2014-08-07 00:00:20.554 -07:00 0098650319 3000 NOTICE Radius-Accounting: RADIUS Accounting start request, ConfigVersionId=133, Device IP Address=171.70.35.137, RequestLatency=4, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=frsung, NAS-IP-Address=171.70.35.137, NAS-Port=1, Framed-IP-Address=10.33.250.89, Class=CACS:892346ab000055f20124e353:npf-sjca-pdp01/195491152/2084874, Called-Station-ID=00-26-cb-ba-90-70, Calling-Station-ID=10-68-3f-75-35-0c, NAS-Identifier=Cisco_cf:27:46, Acct-Status-Type=Start, Acct-Session-Id=53e32404/10:68:3f:75:35:0c/12262, Acct-Authentic=RADIUS, Event-Timestamp=1407394820, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, cisco-av-pair=audit-session-id=892346ab000055f20124e353, cisco-av-pair=dhcp-option=host-name=android-97981535d1e7a422, cisco-av-pair=dhcp-option=dhcp-class-identifier=dhcpcd-5.5.6, Airespace-Wlan-Id=1, AcsSessionID=npf-sjca-pdp01/195491152/2084894, SelectedAccessService=Default Network Access, Step=11004, Step=11017, Step=15049, Step=15008, Step=15004, Step=11005, NetworkDeviceGroups=Location#All Locations#OEAP, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC, CPMSessionID=892346ab000055f20124e353, AllowedProtocolMatchedRule=Dot1X, Location=Location#All Locations#OEAP, Device Type=Device Type#All Device Types#Wireless#WLC,
+Aug 6 16:41:09 10.42.7.63 Aug 7 00:00:21 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969873 1 0 2014-08-07 00:00:21.069 -07:00 0098650386 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=171.70.35.137, Device Port=32770, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=49, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f1fd23e353\;42SessionID=npf-sjca-pdp01/195491152/2084872\;, Called-Station-ID=002333c45b90:alpha_phone, Calling-Station-ID=0018ba78c59d, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, cisco-av-pair=audit-session-id=892346ab000055f1fd23e353, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084872, SelectedAccessService=Default Network Access, DetailedInfo=Invalid username or password specified\, Retry is allowed, EapTunnel=EAP-FAST, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=892346ab000055f1fd23e353,
+Aug 6 16:41:10 10.34.84.145 Aug 7 00:00:22 stage-pdp01 CISE_System_Statistics 0000024615 1 0 2014-08-07 00:00:22.425 -07:00 0000287003 70011 NOTICE System-Stats: ISE Counters, ConfigVersionId=113, OperationCounters=Counter=4_ProbeDnsEndpointLookup:7\,4_EndpointsProfiled:6\,4_EndpointsDeleted:1\,4_ProbeRadiusEndpointsDetected:3\,4_IosSensorDhcpDetected:1\,2_PolicySet-Stage_SJCM_hotspot.Allowed_Protocol-Stage_SJCM1_DRW.Identity-Default:1\,4_EndpointsCached:2\,2_PolicySet-Stage_SJCM_Guest_Selfsponsor.Allowed_Protocol-Stage_SelfSponosr_Auth.Identity-Default:1\,4_ARPRetrieve:58\,4_EndpointsRetrievedFromOwner:2\,4_ProbeDnsEndpointsDetected:1\,9_PolicySet-Stage_SJCM_Guest_Selfsponsor.Global_Exception-Alpha_Guest_Registration:1\,2_PolicySet-Stage_SJCM_hotspot.Allowed_Protocol-Stage_SJCM1_DRW:2\,4_ProbeSnmpQueryEndpointsDetected:40\,4_ProfilerCacheHits:10\,2_PolicySet-Stage_SJCM_Guest_Selfsponsor.Allowed_Protocol-Stage_SelfSponosr_Auth:1\,8_PolicySet-Stage_SJCM_Guest_Selfsponsor:1\,4_EndpointsUpdated:58\,4_EndpointsDetected:44\,4_SnmpQueriesPerformed:2\,4_RemoteUpdate:2\,4_IosSensorHttpDetected:1\,4_ARPUpdate:2\,9_PolicySet-Stage_SJCM_hotspot.Global_Exception-SJCM-stage-drw-redirect:1\,4_ProbeDnsEndpointLookupAvert:11\,4_ARPMiss:30\,4_ARPSave:2\,4_ARPHit:28\,4_RemoteUpdateAverted:2\,8_PolicySet-Stage_SJCM_hotspot:2\,4_RadiusPacketsReceived:33\,4_LocalEndPointReads:52,
+Aug 6 16:41:10 10.42.7.63 Aug 7 00:00:22 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969874 1 0 2014-08-07 00:00:22.437 -07:00 0098650459 12117 WARN EAP: EAP-FAST inner method finished with failure, ConfigVersionId=133, Device IP Address=10.34.149.5, Device Port=1645, DestinationIPAddress=10.42.7.63, DestinationPort=1812, RadiusPacketType=AccessRequest, RadiusIdentifier=118, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Service-Type=Framed, Framed-MTU=1449, State=37CPMSessionID=0a22950553e3214500007ec0\;42SessionID=npf-sjca-pdp01/195491152/2084881\;, Called-Station-ID=64-d9-89-42-23-50:alpha_phone, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22950553e3214500007ec0, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha_phone, Airespace-Wlan-Id=2, AcsSessionID=npf-sjca-pdp01/195491152/2084881, SelectedAccessService=Default Network Access, DetailedInfo=Invalid username or password specified\, Retry is allowed, EapTunnel=EAP-FAST, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0a22950553e3214500007ec0,
+Aug 6 16:41:10 10.42.7.63 Aug 7 00:00:22 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969875 1 0 2014-08-07 00:00:22.767 -07:00 0098650499 12930 WARN Failed-Attempt: Supplicant stopped responding to ISE after sending it the first PEAP message, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084638, SelectedAccessService=Default Network Access, EapTunnel=PEAP, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-D7-93, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22950553e3222a00007ec2,
+Aug 6 16:41:10 10.42.7.63 Aug 7 00:00:22 npf-sjca-pdp01 CISE_Failed_Attempts 0001969876 1 0 2014-08-07 00:00:22.767 -07:00 0098650500 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084638, SelectedAccessService=Default Network Access, FailureReason=12930 Supplicant stopped responding to ISE after sending it the first PEAP message, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=12930, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=PEAP, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-D7-93, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap6, CPMSessionID=0a22950553e3222a00007ec2, EndPointMACAddress=00-23-33-41-D7-93, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=14=120000, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:41:11 10.42.7.63 Aug 7 00:00:23 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969877 1 0 2014-08-07 00:00:23.610 -07:00 0098650501 12930 WARN Failed-Attempt: Supplicant stopped responding to ISE after sending it the first PEAP message, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084639, SelectedAccessService=Default Network Access, EapTunnel=PEAP, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22950553e3214500007ec0,
+Aug 6 16:41:11 10.42.7.63 Aug 7 00:00:23 npf-sjca-pdp01 CISE_Failed_Attempts 0001969878 1 0 2014-08-07 00:00:23.611 -07:00 0098650502 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.149.5, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084639, SelectedAccessService=Default Network Access, FailureReason=12930 Supplicant stopped responding to ISE after sending it the first PEAP message, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=12930, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=PEAP, User-Name=anonymous, NAS-IP-Address=10.34.149.5, NAS-Port=60000, Calling-Station-ID=00-23-33-41-78-96, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap6, CPMSessionID=0a22950553e3214500007ec0, EndPointMACAddress=00-23-33-41-78-96, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=14=120000, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:41:12 10.42.7.63 Aug 7 00:00:24 npf-sjca-pdp01 CISE_Passed_Authentications 0001969879 1 0 2014-08-07 00:00:24.156 -07:00 0098650623 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=johblum, Protocol=Radius, RequestLatency=26, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000052ebd5d4e253\;42SessionID=npf-sjca-pdp01/195491152/2084897\;, Called-Station-ID=0019078cd910:alpha_phone, Calling-Station-ID=001bd4582830, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:41:12 10.42.7.63 Aug 7 00:00:24 npf-sjca-pdp01 CISE_RADIUS_Accounting 0001969880 1 0 2014-08-07 00:00:24.301 -07:00 0098650630 3002 NOTICE Radius-Accounting: RADIUS Accounting watchdog update, ConfigVersionId=133, Device IP Address=171.70.35.137, RequestLatency=3, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=johblum, NAS-IP-Address=171.70.35.137, NAS-Port=1, Framed-IP-Address=10.33.118.252, Class=CACS:892346ab000052ebd5d4e253:npf-sjca-pdp01/195491152/2084897, Called-Station-ID=00-19-07-8c-d9-10, Calling-Station-ID=00-1b-d4-58-28-30, NAS-Identifier=Cisco_cf:27:46, Acct-Status-Type=Interim-Update, Acct-Delay-Time=0, Acct-Input-Octets=0, Acct-Output-Octets=0, Acct-Session-Id=53e2d551/00:1b:d4:58:28:30/11778, Acct-Authentic=RADIUS, Acct-Session-Time=20152, Acct-Input-Packets=0, Acct-Output-Packets=0, undefined-52=
+Aug 6 16:41:18 10.42.8.44 Aug 7 00:00:30 npf-sjca-mnt02 CISE_System_Statistics 0000008867 1 0 2014-08-07 00:00:30.082 -07:00 0000010361 70000 NOTICE System-Stats: ISE Utilization, ConfigVersionId=133, SysStatsUtilizationCpu=0.60%, SysStatsUtilizationNetwork=eth0: rcvd = 1011100\; sent = 152992 \;rcvd_dropped = 0\; sent_dropped = 0, SysStatsUtilizationMemory=23.89%, SysStatsUtilizationDiskIO=0.08%, SysStatsUtilizationDiskSpace=26% /, SysStatsUtilizationDiskSpace=10% /boot, SysStatsUtilizationDiskSpace=2% /localdisk, SysStatsUtilizationDiskSpace=7% /storedconfig, SysStatsUtilizationDiskSpace=2% /tmp, AverageRadiusRequestLatency=0, AverageTacacsRequestLatency=0, DeltaRadiusRequestCount=0, DeltaTacacsRequestCount=0, SysStatsUtilizationLoadAvg=0.03, SysStatsCpuCount=8, SysStatsProcessMemoryMB=7577,
+Aug 6 16:41:18 10.42.8.44 Aug 7 00:00:30 npf-sjca-mnt02 CISE_System_Statistics 0000008868 1 0 2014-08-07 00:00:30.082 -07:00 0000010362 70001 NOTICE System-Stats: ISE Process Health, ConfigVersionId=133, SysStatsAcsProcessHealth= Database Listener=running\, PID: 17778\; Database Server=running\, number of processes: 32\; Application Server=running\, PID: 32590\; Profiler Database=running\, PID: 20960\; AD Connector=running\, PID: 4474\; M&T Session Database=running\, PID: 29722\; M&T Log Collector=running\, PID: 29819\; M&T Log Processor=running\, PID: 29866\; Certificate Authority Service=disabled\; pxGrid Infrastructure Service=disabled\; pxGrid Publisher Subscriber Service=disabled\; pxGrid Connection Manager=disabled\; pxGrid Controller=disabled\; Identity Mapping Service=disabled,
+Aug 6 16:41:20 10.42.7.63 Aug 7 00:00:32 npf-sjca-pdp01 CISE_RADIUS_Accounting 0001969881 1 0 2014-08-07 00:00:32.134 -07:00 0098650656 3001 NOTICE Radius-Accounting: RADIUS Accounting stop request, ConfigVersionId=133, Device IP Address=171.70.35.137, RequestLatency=4, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=host/LLIM-WS01.cisco.com, NAS-IP-Address=171.70.35.137, NAS-Port=1, Framed-IP-Address=10.33.248.215, Class=CACS:892346ab0000545b1bfae253:npf-sjca-pdp01/195491152/2081660, Called-Station-ID=00-26-cb-ba-9c-60, Calling-Station-ID=24-77-03-e0-98-7c, NAS-Identifier=Cisco_cf:27:46, Acct-Status-Type=Stop, Acct-Delay-Time=0, Acct-Input-Octets=0, Acct-Output-Octets=0, Acct-Session-Id=53e2fa1d/24:77:03:e0:98:7c/12012, Acct-Authentic=RADIUS, Acct-Session-Time=10739, Acct-Input-Packets=0, Acct-Output-Packets=0, Acct-Terminate-Cause=Service Unavailable, undefined-52=
+Aug 6 16:41:21 10.42.7.63 Aug 7 00:00:33 npf-sjca-pdp01 CISE_Passed_Authentications 0001969882 1 0 2014-08-07 00:00:33.184 -07:00 0098650829 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=johblum, Protocol=Radius, RequestLatency=22, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000052ebd5d4e253\;42SessionID=npf-sjca-pdp01/195491152/2084909\;, Called-Station-ID=0019078cd910:alpha_phone, Calling-Station-ID=001bd4582830, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:41:21 10.42.7.63 Aug 7 00:00:33 npf-sjca-pdp01 CISE_RADIUS_Accounting 0001969883 1 0 2014-08-07 00:00:33.334 -07:00 0098650887 3002 NOTICE Radius-Accounting: RADIUS Accounting watchdog update, ConfigVersionId=133, Device IP Address=171.70.35.137, RequestLatency=2, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=johblum, NAS-IP-Address=171.70.35.137, NAS-Port=1, Framed-IP-Address=10.33.118.252, Class=CACS:892346ab000052ebd5d4e253:npf-sjca-pdp01/195491152/2084909, Called-Station-ID=00-19-07-8c-d9-10, Calling-Station-ID=00-1b-d4-58-28-30, NAS-Identifier=Cisco_cf:27:46, Acct-Status-Type=Interim-Update, Acct-Delay-Time=0, Acct-Input-Octets=0, Acct-Output-Octets=0, Acct-Session-Id=53e2d551/00:1b:d4:58:28:30/11778, Acct-Authentic=RADIUS, Acct-Session-Time=20161, Acct-Input-Packets=0, Acct-Output-Packets=0, undefined-52=
+Aug 6 16:41:21 10.42.7.63 Aug 7 00:00:33 npf-sjca-pdp01 CISE_Passed_Authentications 0001969884 1 0 2014-08-07 00:00:33.361 -07:00 0098650913 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=szcheng, Protocol=Radius, RequestLatency=20, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f31024e353\;42SessionID=npf-sjca-pdp01/195491152/2084910\;, Called-Station-ID=0023045b19a0:alpha, Calling-Station-ID=28cfe9131749, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:41:22 10.42.7.63 Aug 7 00:00:34 npf-sjca-pdp01 CISE_RADIUS_Accounting 0001969885 1 0 2014-08-07 00:00:34.819 -07:00 0098650920 3000 NOTICE Radius-Accounting: RADIUS Accounting start request, ConfigVersionId=133, Device IP Address=171.70.35.137, RequestLatency=4, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=szcheng, NAS-IP-Address=171.70.35.137, NAS-Port=1, Framed-IP-Address=10.33.250.43, Class=CACS:892346ab000055f31024e353:npf-sjca-pdp01/195491152/2084910, Called-Station-ID=00-23-04-5b-19-a0, Calling-Station-ID=28-cf-e9-13-17-49, NAS-Identifier=Cisco_cf:27:46, Acct-Status-Type=Start, Acct-Session-Id=53e32412/28:cf:e9:13:17:49/12263, Acct-Authentic=RADIUS, Event-Timestamp=1407394834, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, cisco-av-pair=audit-session-id=892346ab000055f31024e353, cisco-av-pair=dhcp-option=host-name=EXAMPLE, Airespace-Wlan-Id=1, AcsSessionID=npf-sjca-pdp01/195491152/2084912, SelectedAccessService=Default Network Access, Step=11004, Step=11017, Step=15049, Step=15008, Step=15004, Step=11005, NetworkDeviceGroups=Location#All Locations#OEAP, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC, CPMSessionID=892346ab000055f31024e353, AllowedProtocolMatchedRule=Dot1X, Location=Location#All Locations#OEAP, Device Type=Device Type#All Device Types#Wireless#WLC,
+Aug 6 16:41:23 10.42.7.63 Aug 7 00:00:35 npf-sjca-pdp01 CISE_Passed_Authentications 0001969886 1 0 2014-08-07 00:00:35.235 -07:00 0098650949 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=50, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AEF7C76C05C4, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2084913, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AEF7C76C05C4, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AEF7C76C05C4; Class=CACS:0A2250250007AEF7C76C05C4:npf-sjca-pdp01/195491152/2084913; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AEF7C76C05C4&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=938f355367542944a24ffc4fe026550d; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:41:23 10.42.7.63 Aug 7 00:00:35 npf-sjca-pdp01 CISE_RADIUS_Diagnostics 0001969887 1 0 2014-08-07 00:00:35.342 -07:00 0098650950 12933 WARN Failed-Attempt: Supplicant stopped responding to ISE during EAP-FAST tunnel establishment, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, AcsSessionID=npf-sjca-pdp01/195491152/2084656, SelectedAccessService=Default Network Access, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-60-52, NAS-Port-Type=Wireless - IEEE 802.11, CPMSessionID=0a22964453e324d700000d64,
+Aug 6 16:41:23 10.42.7.63 Aug 7 00:00:35 npf-sjca-pdp01 CISE_Failed_Attempts 0001969888 1 0 2014-08-07 00:00:35.342 -07:00 0098650951 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, UserName=anonymous, AcsSessionID=npf-sjca-pdp01/195491152/2084656, SelectedAccessService=Default Network Access, FailureReason=12933 Supplicant stopped responding to ISE during EAP-FAST tunnel establishment, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=11001, Step=11018, Step=12102, Step=12800, Step=12175, Step=12805, Step=12806, Step=12801, Step=12802, Step=12105, Step=11006, Step=12933, Step=5411, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-60-52, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap7, CPMSessionID=0a22964453e324d700000d64, EndPointMACAddress=00-23-33-41-60-52, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, StepLatency=31=120001, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:41:23 10.42.7.63 Aug 7 00:00:35 npf-sjca-pdp01 CISE_Failed_Attempts 0001969889 1 0 2014-08-07 00:00:35.877 -07:00 0098650952 5411 NOTICE Failed-Attempt: Supplicant stopped responding to ISE, ConfigVersionId=133, RadiusPacketType=Drop, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, UserName=pnirala, AcsSessionID=npf-sjca-pdp01/195491152/2084657, AuthenticationIdentityStore=CiscoAD, AuthenticationMethod=PAP_ASCII, SelectedAccessService=Default Network Access, FailureReason=24408 User authentication against Active Directory failed since user has entered the wrong password, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12101, Step=12100, Step=12625, Step=11006, Step=11001, Step=11018, Step=12102, Step=12800, Step=12175, Step=12805, Step=12806, Step=12801, Step=12802, Step=12105, Step=11006, Step=11001, Step=11018, Step=12104, Step=12804, Step=12816, Step=12132, Step=12209, Step=12218, Step=12125, Step=11521, Step=12105, Step=11006, Step=11001, Step=11018, Step=12104, Step=12220, Step=11522, Step=11806, Step=12105, Step=11006, Step=11001, Step=11018, Step=12104, Step=12607, Step=12606, Step=12611, Step=15041, Step=15006, Step=22072, Step=15013, Step=12606, Step=12105, Step=11006, Step=11001, Step=11018, Step=12104, Step=12610, Step=15041, Step=15004, Step=15006, Step=22072, Step=15013, Step=24430, Step=24325, Step=24313, Step=24319, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24323, Step=24344, Step=24408, Step=22057, Step=22061, Step=12610, Step=12105, Step=11006, Step=11001, Step=11018, Step=12104, Step=12610, Step=12853, Step=11520, Step=12117, Step=22028, Step=12965, Step=12105, Step=11006, Step=5411, SelectedAuthenticationIdentityStores=CiscoAD, SelectedAuthenticationIdentityStores=Internal Endpoints, SelectedAuthenticationIdentityStores=Internal Users, SelectedAuthenticationIdentityStores=Guest Users, NetworkDeviceName=EXAMPLE, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, EapTunnel=EAP-FAST, EapAuthentication=EAP-GTC, User-Name=anonymous, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Calling-Station-ID=00-23-33-41-60-52, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap7, CPMSessionID=0a22964453e324d700000d64, EndPointMACAddress=00-23-33-41-60-52, EapChainingResult=No chaining, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, IdentitySelectionMatchedRule=Default, StepLatency=105=120000, AD-Domain=cisco.com, AD-User-Candidate-Identities=pnirala@cisco.com, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, StepData=59=EAP_TLS_BYOD, StepData=60=CiscoAD, StepData=69=Default, StepData=71=EAP_TLS_BYOD, StepData=72=CiscoAD, StepData=73=CiscoAD, StepData=74=pnirala, StepData=75=cisco.com, StepData=76=cisco.com, StepData=77=icm.cisco.com\,Domain trust direction is one-way, StepData=78=sea-alpha.cisco.com\,Domain trust direction is one-way, StepData=79=partnet.cisco.com\,Domain trust direction is one-way, StepData=80=IL.NDS.COM\,Domain trust direction is one-way, StepData=81=UK.NDS.COM\,Domain trust direction is one-way, StepData=82=SN.local\,Domain trust direction is one-way, StepData=83=webex.local\,Domain trust direction is one-way, StepData=84=in.nds.com\,Domain trust direction is one-way, StepData=85=US.NDS.COM\,Domain trust direction is one-way, StepData=87=STATUS_WRONG_PASSWORD\,ERROR_INVALID_PASSWORD\,pnirala@cisco.com, StepData=88=CiscoAD, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC,
+Aug 6 16:41:24 10.34.84.145 Aug 7 00:00:36 stage-pdp01 CISE_Failed_Attempts 0000024616 1 0 2014-08-07 00:00:36.332 -07:00 0000287007 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19317, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:41:26 10.34.84.145 Aug 7 00:00:38 stage-pdp01 CISE_Failed_Attempts 0000024617 1 0 2014-08-07 00:00:38.336 -07:00 0000287011 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19318, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:41:28 10.34.84.145 Aug 7 00:00:40 stage-pdp01 CISE_Failed_Attempts 0000024618 1 0 2014-08-07 00:00:40.336 -07:00 0000287015 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19319, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:41:30 10.34.84.145 Aug 7 00:00:42 stage-pdp01 CISE_Failed_Attempts 0000024619 1 0 2014-08-07 00:00:42.340 -07:00 0000287019 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19320, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:41:30 10.42.7.63 Aug 7 00:00:42 npf-sjca-pdp01 CISE_Passed_Authentications 0001969890 1 0 2014-08-07 00:00:42.926 -07:00 0098651095 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=kelai, Protocol=Radius, RequestLatency=27, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=kelai, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab0000551cab0ce353\;42SessionID=npf-sjca-pdp01/195491152/2084922\;, Called-Station-ID=0015c7aa45c0:alpha, Calling-Station-ID=5c0a5ba8a9c7, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:41:31 10.42.7.63 Aug 7 00:00:43 npf-sjca-pdp01 CISE_RADIUS_Accounting 0001969891 1 0 2014-08-07 00:00:43.000 -07:00 0098651102 3002 NOTICE Radius-Accounting: RADIUS Accounting watchdog update, ConfigVersionId=133, Device IP Address=171.70.35.137, RequestLatency=3, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=kelai, NAS-IP-Address=171.70.35.137, NAS-Port=1, Framed-IP-Address=10.33.249.111, Class=CACS:892346ab0000551cab0ce353:npf-sjca-pdp01/195491152/2084922, Called-Station-ID=00-15-c7-aa-45-c0, Calling-Station-ID=5c-0a-5b-a8-a9-c7, NAS-Identifier=Cisco_cf:27:46, Acct-Status-Type=Interim-Update, Acct-Delay-Time=0, Acct-Input-Octets=0, Acct-Output-Octets=0, Acct-Session-Id=53e30cad/5c:0a:5b:a8:a9:c7/12129, Acct-Authentic=RADIUS, Acct-Session-Time=5998, Acct-Input-Packets=0, Acct-Output-Packets=0, undefined-52=
+Aug 6 16:41:32 10.34.84.145 Aug 7 00:00:44 stage-pdp01 CISE_Failed_Attempts 0000024620 1 0 2014-08-07 00:00:44.340 -07:00 0000287023 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19321, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:41:34 10.34.84.145 Aug 7 00:00:46 stage-pdp01 CISE_Failed_Attempts 0000024621 1 0 2014-08-07 00:00:46.344 -07:00 0000287027 5405 NOTICE Failed-Attempt: RADIUS Request dropped, ConfigVersionId=113, Device IP Address=172.23.91.132, Device Port=32769, DestinationIPAddress=10.34.84.145, DestinationPort=1812, Protocol=Radius, User-Name=test, NAS-IP-Address=192.168.30.11, Service-Type=NAS Prompt, NAS-Identifier=Cisco_1b:e0:84, AcsSessionID=stage-pdp01/196593288/19322, FailureReason=11007 Could not locate Network Device or AAA Client, Step=11001, Step=11017, Step=11007, Step=5405,
+Aug 6 16:40:48 10.42.7.64 Aug 7 00:00:00 npf-sjca-pdp02 CISE_Passed_Authentications 0000370852 1 0 2014-08-07 00:00:00.581 -07:00 0011266563 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.34.76.212, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=maswank, Protocol=Radius, RequestLatency=63, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=maswank, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a224cd40002fdef53e323ef\;41SessionID=npf-sjca-pdp02/195481465/270930\;, Called-Station-ID=a4-56-30-0f-78-80:alpha_example, Calling-Station-ID=00-21-6a-ab-3a-fe, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 601, undefined-89=
+Aug 6 16:40:52 10.42.7.63 Aug 7 00:00:04 npf-sjca-pdp01 CISE_Passed_Authentications 0001969823 1 0 2014-08-07 00:00:04.338 -07:00 0098648223 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=58, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AEF6C76B9093, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2084825, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AEF6C76B9093, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AEF6C76B9093; Class=CACS:0A2250250007AEF6C76B9093:npf-sjca-pdp01/195491152/2084825; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AEF6C76B9093&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=47ab1ee8a5eeb1d37d3194083abfeaa4; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:40:59 10.42.7.64 Aug 7 00:00:11 npf-sjca-pdp02 CISE_Passed_Authentications 0000370856 1 0 2014-08-07 00:00:11.093 -07:00 0011266671 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.34.76.212, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=maswank, Protocol=Radius, RequestLatency=43, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=maswank, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a224cd40002fdef53e323ef\;41SessionID=npf-sjca-pdp02/195481465/270933\;, Called-Station-ID=a4-56-30-0f-78-80:alpha_example, Calling-Station-ID=00-21-6a-ab-3a-fe, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 601, undefined-89=
+Aug 6 16:41:06 10.42.7.63 Aug 7 00:00:18 npf-sjca-pdp01 CISE_Passed_Authentications 0001969861 1 0 2014-08-07 00:00:18.392 -07:00 0098650111 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=mkrummen, Protocol=Radius, RequestLatency=30, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000054f03809e353\;42SessionID=npf-sjca-pdp01/195491152/2084875\;, Called-Station-ID=0024c48d6e40:alpha_phone, Calling-Station-ID=001f9e8b6c9f, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:41:06 10.42.7.63 Aug 7 00:00:18 npf-sjca-pdp01 CISE_Passed_Authentications 0001969863 1 0 2014-08-07 00:00:18.485 -07:00 0098650153 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=frsung, Protocol=Radius, RequestLatency=26, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=frsung, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f20124e353\;42SessionID=npf-sjca-pdp01/195491152/2084874\;, Called-Station-ID=0026cbba9070:alpha, Calling-Station-ID=10683f75350c, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:41:12 10.42.7.63 Aug 7 00:00:24 npf-sjca-pdp01 CISE_Passed_Authentications 0001969879 1 0 2014-08-07 00:00:24.156 -07:00 0098650623 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=johblum, Protocol=Radius, RequestLatency=26, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000052ebd5d4e253\;42SessionID=npf-sjca-pdp01/195491152/2084897\;, Called-Station-ID=0019078cd910:alpha_phone, Calling-Station-ID=001bd4582830, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:41:21 10.42.7.63 Aug 7 00:00:33 npf-sjca-pdp01 CISE_Passed_Authentications 0001969882 1 0 2014-08-07 00:00:33.184 -07:00 0098650829 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=johblum, Protocol=Radius, RequestLatency=22, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000052ebd5d4e253\;42SessionID=npf-sjca-pdp01/195491152/2084909\;, Called-Station-ID=0019078cd910:alpha_phone, Calling-Station-ID=001bd4582830, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:41:21 10.42.7.63 Aug 7 00:00:33 npf-sjca-pdp01 CISE_Passed_Authentications 0001969884 1 0 2014-08-07 00:00:33.361 -07:00 0098650913 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=szcheng, Protocol=Radius, RequestLatency=20, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f31024e353\;42SessionID=npf-sjca-pdp01/195491152/2084910\;, Called-Station-ID=0023045b19a0:alpha, Calling-Station-ID=28cfe9131749, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:41:23 10.42.7.63 Aug 7 00:00:35 npf-sjca-pdp01 CISE_Passed_Authentications 0001969886 1 0 2014-08-07 00:00:35.235 -07:00 0098650949 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=50, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AEF7C76C05C4, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2084913, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AEF7C76C05C4, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AEF7C76C05C4; Class=CACS:0A2250250007AEF7C76C05C4:npf-sjca-pdp01/195491152/2084913; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AEF7C76C05C4&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=938f355367542944a24ffc4fe026550d; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:41:30 10.42.7.63 Aug 7 00:00:42 npf-sjca-pdp01 CISE_Passed_Authentications 0001969890 1 0 2014-08-07 00:00:42.926 -07:00 0098651095 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=kelai, Protocol=Radius, RequestLatency=27, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=kelai, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab0000551cab0ce353\;42SessionID=npf-sjca-pdp01/195491152/2084922\;, Called-Station-ID=0015c7aa45c0:alpha, Calling-Station-ID=5c0a5ba8a9c7, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:41:36 10.42.7.63 Aug 7 00:00:48 npf-sjca-pdp01 CISE_Passed_Authentications 0001969892 1 0 2014-08-07 00:00:48.027 -07:00 0098651227 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=belkhati, Protocol=Radius, RequestLatency=23, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055977018e353\;42SessionID=npf-sjca-pdp01/195491152/2084925\;, Called-Station-ID=00270d5fe0f0:alpha_phone, Calling-Station-ID=00233341f6f6, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:41:43 10.42.7.64 Aug 7 00:00:55 npf-sjca-pdp02 CISE_Passed_Authentications 0000370859 1 0 2014-08-07 00:00:55.611 -07:00 0011266780 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.34.76.212, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=hslai, Protocol=Radius, RequestLatency=72, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=hslai, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a224cd40002fdf053e32427\;41SessionID=npf-sjca-pdp02/195481465/270936\;, Called-Station-ID=a4-56-30-0e-44-70:alpha_example, Calling-Station-ID=24-a2-e1-3b-4b-cb, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 601, undefined-89=
+Aug 6 16:41:45 10.42.7.63 Aug 7 00:00:57 npf-sjca-pdp01 CISE_Passed_Authentications 0001969899 1 0 2014-08-07 00:00:57.211 -07:00 0098651525 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=johblum, Protocol=Radius, RequestLatency=82, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000052ebd5d4e253\;42SessionID=npf-sjca-pdp01/195491152/2084939\;, Called-Station-ID=0019078cd910:alpha_phone, Calling-Station-ID=001bd4582830, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:41:45 10.42.7.63 Aug 7 00:00:57 npf-sjca-pdp01 CISE_Passed_Authentications 0001969903 1 0 2014-08-07 00:00:57.771 -07:00 0098651691 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-BE-F6, Protocol=Radius, RequestLatency=56, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6bef6, NAS-IP-Address=10.34.75.4, NAS-Port=50244, Service-Type=Call Check, Framed-IP-Address=10.34.75.9, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AB, Calling-Station-ID=BC-30-5B-E6-BE-F6, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/44, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AEF9C76C61C8, OriginalUserName=bc305be6bef6, AcsSessionID=npf-sjca-pdp01/195491152/2084943, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AEF9C76C61C8, EndPointMACAddress=BC-30-5B-E6-BE-F6, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:BE:F6; User-Name=BC-30-5B-E6-BE-F6; State=ReauthSession:0A2250250007AEF9C76C61C8; Class=CACS:0A2250250007AEF9C76C61C8:npf-sjca-pdp01/195491152/2084943; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AEF9C76C61C8&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=6b21ab7d3cb8bacfb4f0ef9b3b23b06d; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:41:50 10.42.7.63 Aug 7 00:01:02 npf-sjca-pdp01 CISE_Passed_Authentications 0001969914 1 0 2014-08-07 00:01:02.919 -07:00 0098652398 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=shpoon, Protocol=Radius, RequestLatency=35, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab0000556efe14e353\;42SessionID=npf-sjca-pdp01/195491152/2084951\;, Called-Station-ID=0023045b1920:alpha_phone, Calling-Station-ID=0024975b4a91, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:42:00 10.42.7.63 Aug 7 00:01:12 npf-sjca-pdp01 CISE_Passed_Authentications 0001969917 1 0 2014-08-07 00:01:12.120 -07:00 0098652571 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=62, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AEFAC76C98B0, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2084972, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AEFAC76C98B0, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AEFAC76C98B0; Class=CACS:0A2250250007AEFAC76C98B0:npf-sjca-pdp01/195491152/2084972; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AEFAC76C98B0&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=55b957caf8fafe24fc1b4679e7e12869; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:42:04 10.42.7.63 Aug 7 00:01:16 npf-sjca-pdp01 CISE_Passed_Authentications 0001969921 1 0 2014-08-07 00:01:16.663 -07:00 0098652692 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.33.216.5, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=host/QUYNHDN-WS02.cisco.com, Protocol=Radius, RequestLatency=19, NetworkDeviceName=sjcn-22a-nmtg-sw1, User-Name=host/QUYNHDN-WS02.cisco.com, NAS-IP-Address=10.33.216.5, NAS-Port=60000, Service-Type=Framed, Framed-IP-Address=10.33.219.21, Framed-MTU=1449, State=37CPMSessionID=0a21d94153e253b200000ecd\;42SessionID=npf-sjca-pdp01/195491152/2084975\;, Called-Station-ID=08-cc-68-63-bd-60:alpha, Calling-Station-ID=3C-A9-F4-20-EC-3C, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap11, EAP-Key-Name=, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a21d94153e253b200000ecd, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha, Airespace-Wlan-Id=5, AcsSessionID=npf-sjca-pdp01/195491152/2084975, AuthenticationIdentityStore=CiscoAD, AuthenticationMethod=MSCHAPV2, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=PermitAccess, IdentityGroup=Endpoint Identity Groups:Profiled:Workstation, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12302, Step=12318, Step=12800, Step=12805, Step=12806, Step=12807, Step=12810, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12318, Step=12812, Step=12804, Step=12801, Step=12802, Step=12816, Step=12310, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12313, Step=11521, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11522, Step=11806, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11808, Step=15041, Step=15006, Step=22072, Step=15013, Step=24431, Step=24325, Step=24313, Step=24319, Step=24323, Step=24343, Step=24470, Step=22037, Step=11824, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11810, Step=11814, Step=11519, Step=12314, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=15036, Step=15004, Step=15016, Step=12306, Step=11503, Step=11002, SelectedAuthenticationIdentityStores=CiscoAD, SelectedAuthenticationIdentityStores=Internal Users, SelectedAuthenticationIdentityStores=Guest Users, NetworkDeviceGroups=Location#All Locations#SJC#SJCN1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=Wired and Wireless, EapTunnel=PEAP, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0a21d94153e253b200000ecd, EndPointMACAddress=3C-A9-F4-20-EC-3C, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Microsoft-Workstation, ISEPolicySetName=Building_SJCN_Wireless_Wired, AllowedProtocolMatchedRule=SJCN Wireless, IdentitySelectionMatchedRule=Default, AD-Domain=cisco.com, AD-Host-Resolved-Identities=QUYNHDN-WS02$@cisco.com, AD-Host-Candidate-Identities=QUYNHDN-WS02$@cisco.com, AD-Host-Join-Point=CISCO.COM, StepData=4= DEVICE.Location, StepData=5= Radius.Service-Type, StepData=6= Radius.NAS-Port-Type, StepData=7=SJCN Wireless, StepData=70=Alpha_ID_Seq, StepData=71=CiscoAD, StepData=72=CiscoAD, StepData=73=host/QUYNHDN-WS02.cisco.com, StepData=74=cisco.com, StepData=75=cisco.com, StepData=77=QUYNHDN-WS02$@cisco.com, StepData=78=CiscoAD, StepData=96=Wired and Wireless, AD-Host-Resolved-DNs=CN=QUYNHDN-WS02\,OU=Workstations\,OU=Cisco Computers\,DC=cisco\,DC=com, AD-Host-DNS-Domain=cisco.com, AD-Host-NetBios-Name=CISCO, HostIdentityGroup=Endpoint Identity Groups:Profiled:Workstation, Location=Location#All Locations#SJC#SJCN1, Device Type=Device Type#All Device Types#Wired, IdentityAccessRestricted=false, Response={State=ReauthSession:0a21d94153e253b200000ecd; Class=CACS:0a21d94153e253b200000ecd:npf-sjca-pdp01/195491152/2084975; EAP-Key-Name=19:53:e3:24:3c:06:25:64:e3:7e:75:94:c9:d0:a1:a6:d9:3c:63:40:c8:03:9d:fb:f5:3f:a6:0d:30:9f:44:79:8a:53:e3:24:3c:9f:29:19:c5:bf:eb:6a:81:2f:17:a5:ea:c4:96:0c:32:80:e1:b9:71:bd:31:a6:c9:38:7b:19:00; MS-MPPE-Send-Key=****; MS-MPPE-Recv-Key=****; LicenseTypes=1; },
+Aug 6 16:42:16 10.42.7.63 Aug 7 00:01:28 npf-sjca-pdp01 CISE_Passed_Authentications 0001969929 1 0 2014-08-07 00:01:28.492 -07:00 0098653067 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-BE-F6, Protocol=Radius, RequestLatency=49, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6bef6, NAS-IP-Address=10.34.75.4, NAS-Port=50244, Service-Type=Call Check, Framed-IP-Address=10.34.75.9, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AB, Calling-Station-ID=BC-30-5B-E6-BE-F6, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/44, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AEFCC76CD6F8, OriginalUserName=bc305be6bef6, AcsSessionID=npf-sjca-pdp01/195491152/2084998, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AEFCC76CD6F8, EndPointMACAddress=BC-30-5B-E6-BE-F6, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:BE:F6; User-Name=BC-30-5B-E6-BE-F6; State=ReauthSession:0A2250250007AEFCC76CD6F8; Class=CACS:0A2250250007AEFCC76CD6F8:npf-sjca-pdp01/195491152/2084998; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AEFCC76CD6F8&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=555e8f50fe89b5465035b33677d28299; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:42:20 10.42.7.63 Aug 7 00:01:32 npf-sjca-pdp01 CISE_Passed_Authentications 0001969938 1 0 2014-08-07 00:01:32.022 -07:00 0098653606 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=belkhati, Protocol=Radius, RequestLatency=23, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f54b24e353\;42SessionID=npf-sjca-pdp01/195491152/2085015\;, Called-Station-ID=00270d5fe0f0:alpha_phone, Calling-Station-ID=00233341f6f6, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:42:37 10.42.7.63 Aug 7 00:01:49 npf-sjca-pdp01 CISE_Passed_Authentications 0001969966 1 0 2014-08-07 00:01:49.796 -07:00 0098654490 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=selinay, Protocol=Radius, RequestLatency=33, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000054366df7e253\;42SessionID=npf-sjca-pdp01/195491152/2085048\;, Called-Station-ID=002304cd1f10:alpha_phone, Calling-Station-ID=0026cb006812, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:42:38 10.42.7.63 Aug 7 00:01:50 npf-sjca-pdp01 CISE_Passed_Authentications 0001969969 1 0 2014-08-07 00:01:50.018 -07:00 0098654556 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=56, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AEFDC76D2D28, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085051, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AEFDC76D2D28, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AEFDC76D2D28; Class=CACS:0A2250250007AEFDC76D2D28:npf-sjca-pdp01/195491152/2085051; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AEFDC76D2D28&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=7f451caa7913180328cb8377d51953ee; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:42:39 10.42.7.64 Aug 7 00:01:51 npf-sjca-pdp02 CISE_Passed_Authentications 0000370868 1 0 2014-08-07 00:01:51.871 -07:00 0011266965 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.129.4, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=yshchory, Protocol=Radius, RequestLatency=83, NetworkDeviceName=NTN-WLC1, User-Name=yshchory, NAS-IP-Address=10.56.129.4, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a388104000045cd53e2be75\;41SessionID=npf-sjca-pdp02/195481465/270943\;, Called-Station-ID=b8-62-1f-44-92-80:alpha_example, Calling-Station-ID=90-18-7c-7b-59-01, NAS-Identifier=ntn01-11a-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 604, undefined-89=
+Aug 6 16:42:40 10.42.7.63 Aug 7 00:01:52 npf-sjca-pdp01 CISE_Passed_Authentications 0001969973 1 0 2014-08-07 00:01:52.426 -07:00 0098654711 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=jmandana, Protocol=Radius, RequestLatency=28, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=jmandana, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f44124e353\;42SessionID=npf-sjca-pdp01/195491152/2084992\;, Called-Station-ID=3cce731a29b0:alpha, Calling-Station-ID=48d705c75f05, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:42:48 10.42.7.63 Aug 7 00:02:00 npf-sjca-pdp01 CISE_Passed_Authentications 0001969978 1 0 2014-08-07 00:02:00.477 -07:00 0098655023 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=rriverol, Protocol=Radius, RequestLatency=32, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=rriverol, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f66724e353\;42SessionID=npf-sjca-pdp01/195491152/2085072\;, Called-Station-ID=00270d607400:alpha, Calling-Station-ID=7cd1c3926792, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:42:49 10.42.7.63 Aug 7 00:02:01 npf-sjca-pdp01 CISE_Passed_Authentications 0001969983 1 0 2014-08-07 00:02:01.931 -07:00 0098655289 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=belkhati, Protocol=Radius, RequestLatency=23, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f54b24e353\;42SessionID=npf-sjca-pdp01/195491152/2085079\;, Called-Station-ID=00270d5fe0f0:alpha_phone, Calling-Station-ID=00233341f6f6, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:42:54 10.42.7.64 Aug 7 00:02:06 npf-sjca-pdp02 CISE_Passed_Authentications 0000370872 1 0 2014-08-07 00:02:06.118 -07:00 0011267109 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.129.4, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=yshchory, Protocol=Radius, RequestLatency=62, NetworkDeviceName=NTN-WLC1, User-Name=yshchory, NAS-IP-Address=10.56.129.4, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a388104000045cd53e2be75\;41SessionID=npf-sjca-pdp02/195481465/270947\;, Called-Station-ID=70-10-5c-f3-2f-80:alpha_example, Calling-Station-ID=90-18-7c-7b-59-01, NAS-Identifier=ntn01-11a-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 604, undefined-89=
+Aug 6 16:43:03 10.42.7.63 Aug 7 00:02:15 npf-sjca-pdp01 CISE_Passed_Authentications 0001970011 1 0 2014-08-07 00:02:15.266 -07:00 0098656460 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=nikmathu, Protocol=Radius, RequestLatency=29, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=nikmathu, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f87624e353\;42SessionID=npf-sjca-pdp01/195491152/2085110\;, Called-Station-ID=001d70596ee0:alpha, Calling-Station-ID=34c059eaa2e6, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:43:04 10.42.7.63 Aug 7 00:02:16 npf-sjca-pdp01 CISE_Passed_Authentications 0001970014 1 0 2014-08-07 00:02:16.745 -07:00 0098656593 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=nikmathu, Protocol=Radius, RequestLatency=27, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=nikmathu, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f87624e353\;42SessionID=npf-sjca-pdp01/195491152/2085115\;, Called-Station-ID=001d70596ee0:alpha, Calling-Station-ID=34c059eaa2e6, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:43:12 10.42.7.64 Aug 7 00:02:24 npf-sjca-pdp02 CISE_Passed_Authentications 0000370876 1 0 2014-08-07 00:02:24.646 -07:00 0011267243 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.72.127, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=host/salfi-pc.cisco.com, Protocol=Radius, RequestLatency=88, NetworkDeviceName=ntn01-11a-sw4, User-Name=host/salfi-pc.cisco.com, NAS-IP-Address=10.56.72.127, NAS-Port=50212, Service-Type=Framed, Framed-IP-Address=169.254.53.87, Framed-MTU=1500, State=37CPMSessionID=0A38487F00000397BDA7BCAC\;41SessionID=npf-sjca-pdp02/195481465/270950\;, Called-Station-ID=00-26-99-28-5E-BB, Calling-Station-ID=3C-97-0E-C3-F8-F1, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/12, EAP-Key-Name=, cisco-av-pair=cts-pac-opaque=****, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0A38487F00000397BDA7BCAC, AcsSessionID=npf-sjca-pdp02/195481465/270950, AuthenticationIdentityStore=CiscoAD, AuthenticationMethod=MSCHAPV2, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=Wired_prePosture, IdentityGroup=Endpoint Identity Groups:Profiled:Workstation, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12302, Step=12318, Step=12800, Step=12805, Step=12806, Step=12807, Step=12810, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12318, Step=12812, Step=12804, Step=12801, Step=12802, Step=12816, Step=12310, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12313, Step=11521, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11522, Step=11806, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11808, Step=15041, Step=15006, Step=22072, Step=15013, Step=24431, Step=24325, Step=24313, Step=24319, Step=24323, Step=24343, Step=24470, Step=22037, Step=11824, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11810, Step=11814, Step=11519, Step=12314, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=15036, Step=15048, Step=15048, Step=24433, Step=24355, Step=24435, Step=24355, Step=24458, Step=24100, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=12306, Step=11503, Step=11002, SelectedAuthenticationIdentityStores=CiscoAD, SelectedAuthenticationIdentityStores=Internal Endpoints, SelectedAuthenticationIdentityStores=Internal Users, SelectedAuthenticationIdentityStores=Guest Users, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=NTN-Wired-Pre_Posture, EapTunnel=PEAP, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0A38487F00000397BDA7BCAC, EndPointMACAddress=3C-97-0E-C3-F8-F1, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Windows8-Workstation, ISEPolicySetName=Location_NTN_Wired, AllowedProtocolMatchedRule=NTN_Wired_Dot1x, IdentitySelectionMatchedRule=Default, StepLatency=41=15252, AD-Domain=cisco.com, AD-Host-Resolved-Identities=SALFI-PC$@cisco.com, AD-Host-Candidate-Identities=SALFI-PC$@cisco.com, AD-Host-Join-Point=CISCO.COM, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9= DEVICE.Device Type, StepData=10=NTN_Wired_Dot1x, StepData=73=EAP_TLS_BYOD, StepData=74=CiscoAD, StepData=75=CiscoAD, StepData=76=host/salfi-pc.cisco.com, StepData=77=cisco.com, StepData=78=cisco.com, StepData=80=SALFI-PC$@cisco.com, StepData=81=CiscoAD, StepData=99= Radius.Service-Type, StepData=100= Radius.NAS-Port-Type, StepData=101=CiscoAD, StepData=102=cisco.com, StepData=103=CiscoAD, StepData=104=cisco.com, StepData=105=CiscoAD, StepData=106=CiscoAD, StepData=107= CiscoAD.ExternalGroups, StepData=108= Session.PostureStatus, StepData=109= DEVICE.Device Type, StepData=110=NTN-Wired-Pre_Posture, AD-Host-Resolved-DNs=CN=SALFI-PC\,OU=Workstations\,OU=Cisco Computers\,DC=cisco\,DC=com, AD-Host-DNS-Domain=cisco.com, AD-Groups-Names=cisco.com/Users/Domain Computers, AD-Host-NetBios-Name=CISCO, HostIdentityGroup=Endpoint Identity Groups:Profiled:Workstation, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, IdentityAccessRestricted=false, ExternalGroups=s-1-5-21-1708537768-1303643608-725345543-515, Response={State=ReauthSession:0A38487F00000397BDA7BCAC; Class=CACS:0A38487F00000397BDA7BCAC:npf-sjca-pdp02/195481465/270950; EAP-Key-Name=19:53:e3:24:6f:39:8e:cd:83:2b:c4:fc:c4:3f:08:e6:0c:6a:02:d7:e2:67:76:ea:4d:63:35:61:ac:4b:2a:ec:01:53:e3:24:6f:ad:5f:72:5d:da:55:6f:f5:e6:68:a9:ef:bb:9f:dc:21:0d:7c:c6:29:5a:d3:53:3b:3c:96:4b:ab; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf.example.com:8443/portal/gateway?sessionId=0A38487F00000397BDA7BCAC&portal=0303a6c2-121d-11e4-91bc-005056811954&action=cpp&token=f593ac62cd614a475bbe3580d05b16c9; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; MS-MPPE-Send-Key=****; MS-MPPE-Recv-Key=****; LicenseTypes=1; },
+Aug 6 16:43:14 10.42.7.63 Aug 7 00:02:26 npf-sjca-pdp01 CISE_Passed_Authentications 0001970027 1 0 2014-08-07 00:02:26.967 -07:00 0098656894 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=kelai, Protocol=Radius, RequestLatency=37, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=kelai, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab0000551cab0ce353\;42SessionID=npf-sjca-pdp01/195491152/2085130\;, Called-Station-ID=0015c7aa45c0:alpha, Calling-Station-ID=5c0a5ba8a9c7, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:43:15 10.42.7.63 Aug 7 00:02:27 npf-sjca-pdp01 CISE_Passed_Authentications 0001970030 1 0 2014-08-07 00:02:27.940 -07:00 0098657003 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-BE-F6, Protocol=Radius, RequestLatency=51, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6bef6, NAS-IP-Address=10.34.75.4, NAS-Port=50244, Service-Type=Call Check, Framed-IP-Address=10.34.75.9, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AB, Calling-Station-ID=BC-30-5B-E6-BE-F6, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/44, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AEFFC76DC158, OriginalUserName=bc305be6bef6, AcsSessionID=npf-sjca-pdp01/195491152/2085132, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AEFFC76DC158, EndPointMACAddress=BC-30-5B-E6-BE-F6, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:BE:F6; User-Name=BC-30-5B-E6-BE-F6; State=ReauthSession:0A2250250007AEFFC76DC158; Class=CACS:0A2250250007AEFFC76DC158:npf-sjca-pdp01/195491152/2085132; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AEFFC76DC158&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=cd2f533457b8b725372f98d8629d40b8; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:43:16 10.42.7.63 Aug 7 00:02:28 npf-sjca-pdp01 CISE_Passed_Authentications 0001970031 1 0 2014-08-07 00:02:28.966 -07:00 0098657037 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=56, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF00C76DC584, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085135, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF00C76DC584, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AF00C76DC584; Class=CACS:0A2250250007AF00C76DC584:npf-sjca-pdp01/195491152/2085135; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF00C76DC584&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=daaf405eaaea7ef6a463479b19aa7e50; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:43:19 10.42.7.64 Aug 7 00:02:31 npf-sjca-pdp02 CISE_Passed_Authentications 0000370881 1 0 2014-08-07 00:02:31.547 -07:00 0011267347 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.34.76.212, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=maswank, Protocol=Radius, RequestLatency=49, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=maswank, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a224cd40002fdf153e32487\;41SessionID=npf-sjca-pdp02/195481465/270954\;, Called-Station-ID=a4-56-30-0f-78-80:alpha_example, Calling-Station-ID=00-21-6a-ab-3a-fe, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 601, undefined-89=
+Aug 6 16:43:33 10.42.7.63 Aug 7 00:02:45 npf-sjca-pdp01 CISE_Passed_Authentications 0001970046 1 0 2014-08-07 00:02:45.106 -07:00 0098657849 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=jheitz, Protocol=Radius, RequestLatency=25, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=jheitz, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055fa9424e353\;42SessionID=npf-sjca-pdp01/195491152/2085171\;, Called-Station-ID=8cb64fa742d0:alpha, Calling-Station-ID=8cfababa11c7, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:43:34 10.42.7.63 Aug 7 00:02:46 npf-sjca-pdp01 CISE_Passed_Authentications 0001970047 1 0 2014-08-07 00:02:46.630 -07:00 0098657976 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=jheitz, Protocol=Radius, RequestLatency=47, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=jheitz, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055fa9424e353\;42SessionID=npf-sjca-pdp01/195491152/2085172\;, Called-Station-ID=8cb64fa742d0:alpha, Calling-Station-ID=8cfababa11c7, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:43:46 10.42.7.63 Aug 7 00:02:58 npf-sjca-pdp01 CISE_Passed_Authentications 0001970058 1 0 2014-08-07 00:02:58.685 -07:00 0098658149 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-BE-F6, Protocol=Radius, RequestLatency=59, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6bef6, NAS-IP-Address=10.34.75.4, NAS-Port=50244, Service-Type=Call Check, Framed-IP-Address=10.34.75.9, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AB, Calling-Station-ID=BC-30-5B-E6-BE-F6, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/44, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF02C76E3688, OriginalUserName=bc305be6bef6, AcsSessionID=npf-sjca-pdp01/195491152/2085186, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF02C76E3688, EndPointMACAddress=BC-30-5B-E6-BE-F6, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:BE:F6; User-Name=BC-30-5B-E6-BE-F6; State=ReauthSession:0A2250250007AF02C76E3688; Class=CACS:0A2250250007AF02C76E3688:npf-sjca-pdp01/195491152/2085186; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF02C76E3688&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=9fb12f81caa3c2fa529b2c45510f84c6; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:43:49 10.42.7.63 Aug 7 00:03:01 npf-sjca-pdp01 CISE_Passed_Authentications 0001970062 1 0 2014-08-07 00:03:01.008 -07:00 0098658323 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=belkhati, Protocol=Radius, RequestLatency=26, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f54b24e353\;42SessionID=npf-sjca-pdp01/195491152/2085196\;, Called-Station-ID=00270d5fe0f0:alpha_phone, Calling-Station-ID=00233341f6f6, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:43:53 10.42.7.64 Aug 7 00:03:05 npf-sjca-pdp02 CISE_Passed_Authentications 0000370889 1 0 2014-08-07 00:03:05.827 -07:00 0011267552 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.129.4, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=yshchory, Protocol=Radius, RequestLatency=64, NetworkDeviceName=NTN-WLC1, User-Name=yshchory, NAS-IP-Address=10.56.129.4, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a388104000045cd53e2be75\;41SessionID=npf-sjca-pdp02/195481465/270958\;, Called-Station-ID=70-10-5c-f3-36-60:alpha_example, Calling-Station-ID=90-18-7c-7b-59-01, NAS-Identifier=ntn01-11a-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 604, undefined-89=
+Aug 6 16:43:54 10.42.7.63 Aug 7 00:03:06 npf-sjca-pdp01 CISE_Passed_Authentications 0001970065 1 0 2014-08-07 00:03:06.883 -07:00 0098658432 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=52, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF03C76E59F0, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085198, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF03C76E59F0, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AF03C76E59F0; Class=CACS:0A2250250007AF03C76E59F0:npf-sjca-pdp01/195491152/2085198; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF03C76E59F0&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=376c890d413803de9db7d905a350513e; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:43:55 10.42.7.64 Aug 7 00:03:07 npf-sjca-pdp02 CISE_Passed_Authentications 0000370893 1 0 2014-08-07 00:03:07.696 -07:00 0011267645 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.72.127, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=host/salfi-pc.cisco.com, Protocol=Radius, RequestLatency=77, NetworkDeviceName=ntn01-11a-sw4, User-Name=host/salfi-pc.cisco.com, NAS-IP-Address=10.56.72.127, NAS-Port=50212, Service-Type=Framed, Framed-IP-Address=10.56.111.14, Framed-MTU=1500, State=37CPMSessionID=0A38487F00000397BDA7BCAC\;41SessionID=npf-sjca-pdp02/195481465/270957\;, Called-Station-ID=00-26-99-28-5E-BB, Calling-Station-ID=3C-97-0E-C3-F8-F1, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/12, EAP-Key-Name=, cisco-av-pair=cts-pac-opaque=****, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0A38487F00000397BDA7BCAC, AcsSessionID=npf-sjca-pdp02/195481465/270957, AuthenticationIdentityStore=CiscoAD, AuthenticationMethod=MSCHAPV2, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=Wired-PermitALL, SelectedAuthorizationProfiles=NTN01_Wired_WorkStations, IdentityGroup=Endpoint Identity Groups:Profiled:Workstation, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12302, Step=12318, Step=12800, Step=12805, Step=12806, Step=12807, Step=12810, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12318, Step=12812, Step=12804, Step=12801, Step=12802, Step=12816, Step=12310, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12313, Step=11521, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11522, Step=11806, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11808, Step=15041, Step=15006, Step=22072, Step=15013, Step=24431, Step=24325, Step=24313, Step=24319, Step=24323, Step=24343, Step=24470, Step=22037, Step=11824, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11810, Step=11814, Step=11519, Step=12314, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=15036, Step=15048, Step=15048, Step=24433, Step=24355, Step=24435, Step=24355, Step=24458, Step=24100, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=15016, Step=12306, Step=11503, Step=11002, SelectedAuthenticationIdentityStores=CiscoAD, SelectedAuthenticationIdentityStores=Internal Endpoints, SelectedAuthenticationIdentityStores=Internal Users, SelectedAuthenticationIdentityStores=Guest Users, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=NTN-Wired_Full_Access, EapTunnel=PEAP, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0A38487F00000397BDA7BCAC, EndPointMACAddress=3C-97-0E-C3-F8-F1, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Windows8-Workstation, ISEPolicySetName=Location_NTN_Wired, AllowedProtocolMatchedRule=NTN_Wired_Dot1x, IdentitySelectionMatchedRule=Default, StepLatency=41=15244, AD-Domain=cisco.com, AD-Host-Resolved-Identities=SALFI-PC$@cisco.com, AD-Host-Candidate-Identities=SALFI-PC$@cisco.com, AD-Host-Join-Point=CISCO.COM, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9= DEVICE.Device Type, StepData=10=NTN_Wired_Dot1x, StepData=73=EAP_TLS_BYOD, StepData=74=CiscoAD, StepData=75=CiscoAD, StepData=76=host/salfi-pc.cisco.com, StepData=77=cisco.com, StepData=78=cisco.com, StepData=80=SALFI-PC$@cisco.com, StepData=81=CiscoAD, StepData=99= Radius.Service-Type, StepData=100= Radius.NAS-Port-Type, StepData=101=CiscoAD, StepData=102=cisco.com, StepData=103=CiscoAD, StepData=104=cisco.com, StepData=105=CiscoAD, StepData=106=CiscoAD, StepData=107= CiscoAD.ExternalGroups, StepData=108= DEVICE.Device Type, StepData=109=NTN-Wired_Full_Access, AD-Host-Resolved-DNs=CN=SALFI-PC\,OU=Workstations\,OU=Cisco Computers\,DC=cisco\,DC=com, AD-Host-DNS-Domain=cisco.com, AD-Groups-Names=cisco.com/Users/Domain Computers, AD-Host-NetBios-Name=CISCO, HostIdentityGroup=Endpoint Identity Groups:Profiled:Workstation, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, PostureStatus=Compliant, IdentityAccessRestricted=false, ExternalGroups=s-1-5-21-1708537768-1303643608-725345543-515, Response={State=ReauthSession:0A38487F00000397BDA7BCAC; Class=CACS:0A38487F00000397BDA7BCAC:npf-sjca-pdp02/195481465/270957; EAP-Key-Name=19:53:e3:24:9a:d1:2c:21:d5:51:bf:68:7d:23:2b:69:2c:1c:36:28:5a:33:4b:45:ad:73:f6:fa:b7:03:7e:ae:e6:53:e3:24:9a:4e:21:e6:1a:07:93:95:f4:93:a3:7e:6a:d7:e1:cc:b9:0a:9d:5b:a0:ca:5e:d8:ae:b7:cb:4d:2e; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PERMIT_ALL_TRAFFIC-4f57e406; cisco-av-pair=cts:security-group-tag=7981-0; MS-MPPE-Send-Key=****; MS-MPPE-Recv-Key=****; LicenseTypes=5; },
+Aug 6 16:43:59 10.42.7.63 Aug 7 00:03:11 npf-sjca-pdp01 CISE_Passed_Authentications 0001970066 1 0 2014-08-07 00:03:11.722 -07:00 0098658583 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=mkrummen, Protocol=Radius, RequestLatency=34, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000054f03809e353\;42SessionID=npf-sjca-pdp01/195491152/2085214\;, Called-Station-ID=0024c48d6e40:alpha_phone, Calling-Station-ID=001f9e8b6c9f, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:44:01 10.42.7.63 Aug 7 00:03:13 npf-sjca-pdp01 CISE_Passed_Authentications 0001970075 1 0 2014-08-07 00:03:13.494 -07:00 0098659017 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=kelai, Protocol=Radius, RequestLatency=48, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=kelai, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab0000551cab0ce353\;42SessionID=npf-sjca-pdp01/195491152/2085220\;, Called-Station-ID=0015c7aa45c0:alpha, Calling-Station-ID=5c0a5ba8a9c7, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:44:03 10.42.7.63 Aug 7 00:03:15 npf-sjca-pdp01 CISE_Passed_Authentications 0001970081 1 0 2014-08-07 00:03:15.630 -07:00 0098659403 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=mkrao, Protocol=Radius, RequestLatency=32, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=mkrao, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055fbb324e353\;42SessionID=npf-sjca-pdp01/195491152/2085227\;, Called-Station-ID=08cc68b42050:alpha, Calling-Station-ID=d8d1cba0186d, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:44:10 10.42.7.63 Aug 7 00:03:22 npf-sjca-pdp01 CISE_Passed_Authentications 0001970085 1 0 2014-08-07 00:03:22.226 -07:00 0098659684 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=mkrao, Protocol=Radius, RequestLatency=28, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=mkrao, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055fbb324e353\;42SessionID=npf-sjca-pdp01/195491152/2085242\;, Called-Station-ID=08cc68b42050:alpha, Calling-Station-ID=d8d1cba0186d, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:44:18 10.42.7.63 Aug 7 00:03:30 npf-sjca-pdp01 CISE_Passed_Authentications 0001970096 1 0 2014-08-07 00:03:30.426 -07:00 0098659885 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=belkhati, Protocol=Radius, RequestLatency=23, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f54b24e353\;42SessionID=npf-sjca-pdp01/195491152/2085257\;, Called-Station-ID=00270d5fe0f0:alpha_phone, Calling-Station-ID=00233341f6f6, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:44:29 10.42.7.63 Aug 7 00:03:41 npf-sjca-pdp01 CISE_Passed_Authentications 0001970104 1 0 2014-08-07 00:03:41.645 -07:00 0098660512 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=belkhati, Protocol=Radius, RequestLatency=22, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f54b24e353\;42SessionID=npf-sjca-pdp01/195491152/2085285\;, Called-Station-ID=00270d5fe0f0:alpha_phone, Calling-Station-ID=00233341f6f6, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:44:33 10.42.7.63 Aug 7 00:03:45 npf-sjca-pdp01 CISE_Passed_Authentications 0001970111 1 0 2014-08-07 00:03:45.670 -07:00 0098660775 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=59, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF05C76EEE6C, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085290, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF05C76EEE6C, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AF05C76EEE6C; Class=CACS:0A2250250007AF05C76EEE6C:npf-sjca-pdp01/195491152/2085290; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF05C76EEE6C&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=34203ff5dd8509c75820a6a35d002fac; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:44:34 10.42.7.63 Aug 7 00:03:46 npf-sjca-pdp01 CISE_Passed_Authentications 0001970112 1 0 2014-08-07 00:03:46.048 -07:00 0098660909 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=mkrummen, Protocol=Radius, RequestLatency=29, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000054f03809e353\;42SessionID=npf-sjca-pdp01/195491152/2085291\;, Called-Station-ID=0024c48d6e40:alpha_phone, Calling-Station-ID=001f9e8b6c9f, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:44:35 10.42.7.63 Aug 7 00:03:47 npf-sjca-pdp01 CISE_Passed_Authentications 0001970116 1 0 2014-08-07 00:03:47.549 -07:00 0098661078 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=shpoon, Protocol=Radius, RequestLatency=24, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab0000556efe14e353\;42SessionID=npf-sjca-pdp01/195491152/2085292\;, Called-Station-ID=0023045b1920:alpha_phone, Calling-Station-ID=0024975b4a91, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:44:44 10.42.7.63 Aug 7 00:03:56 npf-sjca-pdp01 CISE_Passed_Authentications 0001970133 1 0 2014-08-07 00:03:56.220 -07:00 0098661993 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=belkhati, Protocol=Radius, RequestLatency=20, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055f54b24e353\;42SessionID=npf-sjca-pdp01/195491152/2085313\;, Called-Station-ID=00270d5fe0f0:alpha_phone, Calling-Station-ID=00233341f6f6, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:44:45 10.42.7.63 Aug 7 00:03:57 npf-sjca-pdp01 CISE_Passed_Authentications 0001970138 1 0 2014-08-07 00:03:57.971 -07:00 0098662289 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-BE-F6, Protocol=Radius, RequestLatency=63, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6bef6, NAS-IP-Address=10.34.75.4, NAS-Port=50244, Service-Type=Call Check, Framed-IP-Address=10.34.75.9, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AB, Calling-Station-ID=BC-30-5B-E6-BE-F6, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/44, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF06C76F20E9, OriginalUserName=bc305be6bef6, AcsSessionID=npf-sjca-pdp01/195491152/2085322, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF06C76F20E9, EndPointMACAddress=BC-30-5B-E6-BE-F6, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:BE:F6; User-Name=BC-30-5B-E6-BE-F6; State=ReauthSession:0A2250250007AF06C76F20E9; Class=CACS:0A2250250007AF06C76F20E9:npf-sjca-pdp01/195491152/2085322; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF06C76F20E9&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=257b844b0e6b3e9383182e99639cbfe1; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:44:49 10.42.7.64 Aug 7 00:04:01 npf-sjca-pdp02 CISE_Passed_Authentications 0000370906 1 0 2014-08-07 00:04:01.942 -07:00 0011267755 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=64.102.223.98, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=erwitkop, Protocol=Radius, RequestLatency=54, NetworkDeviceName=WNBU-rtp7-noca-oeapwlc1, User-Name=erwitkop, NAS-IP-Address=64.102.223.98, NAS-Port=13, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=4066df620000031d53e32152\;41SessionID=npf-sjca-pdp02/195481465/270966\;, Called-Station-ID=00-1b-8f-8a-5c-30:alpha_example, Calling-Station-ID=a8-86-dd-e9-65-96, NAS-Identifier=Cisco_7a:f7:03, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 100, undefined-89=
+Aug 6 16:45:00 10.42.7.64 Aug 7 00:04:12 npf-sjca-pdp02 CISE_Passed_Authentications 0000370911 1 0 2014-08-07 00:04:12.543 -07:00 0011267864 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.34.76.212, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=maswank, Protocol=Radius, RequestLatency=48, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=maswank, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a224cd40002fdf153e32487\;41SessionID=npf-sjca-pdp02/195481465/270971\;, Called-Station-ID=a4-56-30-0f-78-80:alpha_example, Calling-Station-ID=00-21-6a-ab-3a-fe, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 601, undefined-89=
+Aug 6 16:45:09 10.42.7.63 Aug 7 00:04:21 npf-sjca-pdp01 CISE_Passed_Authentications 0001970172 1 0 2014-08-07 00:04:21.322 -07:00 0098663773 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.32.37.6, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=frhinema, Protocol=Radius, RequestLatency=2, NetworkDeviceName=sjc14-22a-talwar, User-Name=anonymous, NAS-IP-Address=10.32.37.6, NAS-Port=13, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a2025060000006e53e31add\;42SessionID=npf-sjca-pdp01/195491152/2085375\;, Called-Station-ID=3c-08-f6-55-7f-70:ERG-Live-Alpha, Calling-Station-ID=f4-b7-e2-74-52-4e, NAS-Identifier=Cisco_fe:56:00, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 70, undefined-89=
+Aug 6 16:45:09 10.42.7.63 Aug 7 00:04:21 npf-sjca-pdp01 CISE_Passed_Authentications 0001970174 1 0 2014-08-07 00:04:21.521 -07:00 0098663809 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=50, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF07C76F7B15, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085377, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF07C76F7B15, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AF07C76F7B15; Class=CACS:0A2250250007AF07C76F7B15:npf-sjca-pdp01/195491152/2085377; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF07C76F7B15&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=4aee9112021be6923726b74179360669; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:45:14 10.42.7.64 Aug 7 00:04:26 npf-sjca-pdp02 CISE_Passed_Authentications 0000370914 1 0 2014-08-07 00:04:26.299 -07:00 0011267964 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.129.4, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=host/istern.example.com, Protocol=Radius, RequestLatency=84, NetworkDeviceName=NTN-WLC1, User-Name=host/istern.example.com, NAS-IP-Address=10.56.129.4, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a388104000045d653e2c47d\;41SessionID=npf-sjca-pdp02/195481465/270974\;, Called-Station-ID=70-10-5c-f3-2f-80:alpha_example, Calling-Station-ID=24-77-03-f9-4e-cc, NAS-Identifier=ntn01-11a-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 604, undefined-89=
+Aug 6 16:45:16 10.42.7.63 Aug 7 00:04:28 npf-sjca-pdp01 CISE_Passed_Authentications 0001970183 1 0 2014-08-07 00:04:28.716 -07:00 0098664402 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-BE-F6, Protocol=Radius, RequestLatency=72, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6bef6, NAS-IP-Address=10.34.75.4, NAS-Port=50244, Service-Type=Call Check, Framed-IP-Address=10.34.75.9, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AB, Calling-Station-ID=BC-30-5B-E6-BE-F6, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/44, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF08C76F9621, OriginalUserName=bc305be6bef6, AcsSessionID=npf-sjca-pdp01/195491152/2085388, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF08C76F9621, EndPointMACAddress=BC-30-5B-E6-BE-F6, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:BE:F6; User-Name=BC-30-5B-E6-BE-F6; State=ReauthSession:0A2250250007AF08C76F9621; Class=CACS:0A2250250007AF08C76F9621:npf-sjca-pdp01/195491152/2085388; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF08C76F9621&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=e6e80e20faff468fcba6255890d67bb3; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:45:35 10.42.7.63 Aug 7 00:04:47 npf-sjca-pdp01 CISE_Passed_Authentications 0001970198 1 0 2014-08-07 00:04:47.552 -07:00 0098664782 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=mkrao, Protocol=Radius, RequestLatency=26, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=mkrao, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055fbb324e353\;42SessionID=npf-sjca-pdp01/195491152/2085411\;, Called-Station-ID=08cc68b42050:alpha, Calling-Station-ID=d8d1cba0186d, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:45:39 10.42.7.63 Aug 7 00:04:51 npf-sjca-pdp01 CISE_Passed_Authentications 0001970204 1 0 2014-08-07 00:04:51.381 -07:00 0098665179 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=mkrao, Protocol=Radius, RequestLatency=26, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=mkrao, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055fbb324e353\;42SessionID=npf-sjca-pdp01/195491152/2085423\;, Called-Station-ID=08cc68b42050:alpha, Calling-Station-ID=d8d1cba0186d, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:45:45 10.42.7.63 Aug 7 00:04:57 npf-sjca-pdp01 CISE_Passed_Authentications 0001970206 1 0 2014-08-07 00:04:57.375 -07:00 0098665255 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=51, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF0AC77007B5, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085435, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF0AC77007B5, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AF0AC77007B5; Class=CACS:0A2250250007AF0AC77007B5:npf-sjca-pdp01/195491152/2085435; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF0AC77007B5&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=cd8173d87cdc48d5c223a6d1f0ac8cd1; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:45:55 10.42.7.63 Aug 7 00:05:07 npf-sjca-pdp01 CISE_Passed_Authentications 0001970208 1 0 2014-08-07 00:05:07.248 -07:00 0098665479 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=shahuja, Protocol=Radius, RequestLatency=27, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=shahuja, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055fe2225e353\;42SessionID=npf-sjca-pdp01/195491152/2085447\;, Called-Station-ID=3cce731a2410:alpha, Calling-Station-ID=68a86d1743da, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:46:00 10.42.7.64 Aug 7 00:05:12 npf-sjca-pdp02 CISE_Passed_Authentications 0000370921 1 0 2014-08-07 00:05:12.246 -07:00 0011268015 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.129.4, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=54-26-96-78-2C-E8, Protocol=Radius, RequestLatency=134, NetworkDeviceName=NTN-WLC1, User-Name=542696782ce8, NAS-IP-Address=10.56.129.4, NAS-Port=1, Service-Type=Call Check, Framed-MTU=1300, Called-Station-ID=b8-62-1f-44-92-80:alpha-guest, Calling-Station-ID=54-26-96-78-2c-e8, NAS-Identifier=ntn01-11a-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 603, cisco-av-pair=audit-session-id=0a388104000045d753e2c4ad, Airespace-Wlan-Id=2, OriginalUserName=542696782ce8, AcsSessionID=npf-sjca-pdp02/195481465/270978, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=WLC_NTN_CWA, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled:Apple-iPhone, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC, AuthorizationPolicyMatchedRule=Wireless-Dual_SSID, UserType=Host, CPMSessionID=0a388104000045d753e2c4ad, EndPointMACAddress=54-26-96-78-2C-E8, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Apple-iPhone, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Location_NTN_Wireless, AllowedProtocolMatchedRule=Byod-MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= Radius.NAS-IP-Address, StepData=9= DEVICE.Device Type, StepData=10= Radius.NAS-Port-Type, StepData=11=Byod-MAB, StepData=14=Internal Endpoints, StepData=20= Network Access.Device IP Address, StepData=21= Radius.Service-Type, StepData=22= Radius.NAS-Port-Type, StepData=23= Airespace.Airespace-Wlan-Id, StepData=24=Wireless-Dual_SSID, HostIdentityGroup=Endpoint Identity Groups:Profiled:Apple-iPhone, Model Name=5508, Software Version=7.0.114.x, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wireless#WLC, Response={UserName=54:26:96:78:2C:E8; User-Name=54-26-96-78-2C-E8; State=ReauthSession:0a388104000045d753e2c4ad; Class=CACS:0a388104000045d753e2c4ad:npf-sjca-pdp02/195481465/270978; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT-NSP; cisco-av-pair=url-redirect=https://npf.example.com:8443/portal/gateway?sessionId=0a388104000045d753e2c4ad&portal=2aff6652-121d-11e4-91bc-005056811954&action=cwa&token=88f42913ab8d6d6c724e5707d7f73755; cisco-av-pair=profile-name=Apple-iPhone; Airespace-ACL-Name=ACL-WEBAUTH-REDIRECT-NSP; LicenseTypes=1; },
+Aug 6 16:46:00 10.42.7.64 Aug 7 00:05:12 npf-sjca-pdp02 CISE_Passed_Authentications 0000370922 1 0 2014-08-07 00:05:12.907 -07:00 0011268043 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.129.4, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=54-26-96-78-2C-E8, Protocol=Radius, RequestLatency=112, NetworkDeviceName=NTN-WLC1, User-Name=542696782ce8, NAS-IP-Address=10.56.129.4, NAS-Port=1, Service-Type=Call Check, Framed-MTU=1300, Called-Station-ID=b8-62-1f-44-92-80:alpha-guest, Calling-Station-ID=54-26-96-78-2c-e8, NAS-Identifier=ntn01-11a-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 603, cisco-av-pair=audit-session-id=0a388104000045d753e2c4ad, Airespace-Wlan-Id=2, OriginalUserName=542696782ce8, AcsSessionID=npf-sjca-pdp02/195481465/270979, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=WLC_NTN_CWA, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled:Apple-iPhone, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC, AuthorizationPolicyMatchedRule=Wireless-Dual_SSID, UserType=Host, CPMSessionID=0a388104000045d753e2c4ad, EndPointMACAddress=54-26-96-78-2C-E8, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Apple-iPhone, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Location_NTN_Wireless, AllowedProtocolMatchedRule=Byod-MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= Radius.NAS-IP-Address, StepData=9= DEVICE.Device Type, StepData=10= Radius.NAS-Port-Type, StepData=11=Byod-MAB, StepData=14=Internal Endpoints, StepData=20= Network Access.Device IP Address, StepData=21= Radius.Service-Type, StepData=22= Radius.NAS-Port-Type, StepData=23= Airespace.Airespace-Wlan-Id, StepData=24=Wireless-Dual_SSID, HostIdentityGroup=Endpoint Identity Groups:Profiled:Apple-iPhone, Model Name=5508, Software Version=7.0.114.x, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wireless#WLC, Response={UserName=54:26:96:78:2C:E8; User-Name=54-26-96-78-2C-E8; State=ReauthSession:0a388104000045d753e2c4ad; Class=CACS:0a388104000045d753e2c4ad:npf-sjca-pdp02/195481465/270979; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT-NSP; cisco-av-pair=url-redirect=https://npf.example.com:8443/portal/gateway?sessionId=0a388104000045d753e2c4ad&portal=2aff6652-121d-11e4-91bc-005056811954&action=cwa&token=81b7ea00e70c0fcb9f67bfcfc945972e; cisco-av-pair=profile-name=Apple-iPhone; Airespace-ACL-Name=ACL-WEBAUTH-REDIRECT-NSP; LicenseTypes=1; },
+Aug 6 16:46:04 10.42.7.63 Aug 7 00:05:16 npf-sjca-pdp01 CISE_Passed_Authentications 0001970221 1 0 2014-08-07 00:05:16.194 -07:00 0098665794 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=jdoe, Protocol=Radius, RequestLatency=57, NetworkDeviceName=EXAMPLE, User-Name=jdoe, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-IP-Address=10.34.137.144, Framed-MTU=1449, State=37CPMSessionID=0a22964453e2ae150000038a\;42SessionID=npf-sjca-pdp01/195491152/2085471\;, Called-Station-ID=18-33-9d-71-aa-40:alpha, Calling-Station-ID=48-F8-B3-7B-E6-7C, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap9, EAP-Key-Name=, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e2ae150000038a, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha, Airespace-Wlan-Id=1, AcsSessionID=npf-sjca-pdp01/195491152/2085471, AuthenticationIdentityStore=CiscoAD, AuthenticationMethod=MSCHAPV2, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=PermitAccess, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12302, Step=12318, Step=12800, Step=12805, Step=12806, Step=12807, Step=12810, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12318, Step=12812, Step=12804, Step=12801, Step=12802, Step=12816, Step=12310, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12313, Step=11521, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11522, Step=11806, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11808, Step=15041, Step=15006, Step=22072, Step=15013, Step=24430, Step=24325, Step=24313, Step=24319, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24323, Step=24343, Step=24402, Step=22037, Step=11824, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11810, Step=11814, Step=11519, Step=12314, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=24423, Step=15036, Step=24432, Step=24355, Step=24416, Step=24355, Step=24420, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=12306, Step=11503, Step=11002, SelectedAuthenticationIdentityStores=CiscoAD, SelectedAuthenticationIdentityStores=Internal Endpoints, SelectedAuthenticationIdentityStores=Internal Users, SelectedAuthenticationIdentityStores=Guest Users, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, AuthorizationPolicyMatchedRule=Default, EapTunnel=PEAP, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0a22964453e2ae150000038a, EndPointMACAddress=48-F8-B3-7B-E6-7C, PostureAssessmentStatus=NotApplicable, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, IdentitySelectionMatchedRule=Default, AD-Domain=cisco.com, AD-User-Resolved-Identities=jdoe@cisco.com, AD-User-Candidate-Identities=jdoe@cisco.com, AD-User-Join-Point=CISCO.COM, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, StepData=72=EAP_TLS_BYOD, StepData=73=CiscoAD, StepData=74=CiscoAD, StepData=75=jdoe, StepData=76=cisco.com, StepData=77=cisco.com, StepData=78=icm.cisco.com\,Domain trust direction is one-way, StepData=79=sea-alpha.cisco.com\,Domain trust direction is one-way, StepData=80=partnet.cisco.com\,Domain trust direction is one-way, StepData=81=IL.NDS.COM\,Domain trust direction is one-way, StepData=82=UK.NDS.COM\,Domain trust direction is one-way, StepData=83=SN.local\,Domain trust direction is one-way, StepData=84=webex.local\,Domain trust direction is one-way, StepData=85=in.nds.com\,Domain trust direction is one-way, StepData=86=US.NDS.COM\,Domain trust direction is one-way, StepData=88=jdoe@cisco.com, StepData=89=CiscoAD, StepData=108=CiscoAD, StepData=109=cisco.com, StepData=110=CiscoAD, StepData=111=cisco.com, StepData=112=CiscoAD, StepData=113= CiscoAD.ExternalGroups, StepData=114= Radius.Service-Type, StepData=115= Radius.NAS-Port-Type, StepData=116= Session.Device-OS, StepData=117= Radius.Called-Station-ID, StepData=118=Default, AD-User-Resolved-DNs=CN=jdoe\,OU=Employees\,OU=Cisco Users\,DC=cisco\,DC=com, AD-User-DNS-Domain=cisco.com, AD-Groups-Names=cisco.com/Users/Domain Users, AD-User-NetBios-Name=CISCO, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC, IdentityAccessRestricted=false, Response={State=ReauthSession:0a22964453e2ae150000038a; Class=CACS:0a22964453e2ae150000038a:npf-sjca-pdp01/195491152/2085471; EAP-Key-Name=19:53:e3:25:2d:cb:fa:24:96:fb:fa:9a:43:df:39:70:ee:69:33:07:07:61:35:61:c2:c9:7f:81:48:89:11:0d:a3:53:e3:25:2c:61:63:3e:bd:03:4f:64:37:af:11:d5:1d:50:8a:6f:ab:32:b7:35:10:23:3b:30:c7:ed:35:3a:16; MS-MPPE-Send-Key=****; MS-MPPE-Recv-Key=****; LicenseTypes=1; },
+Aug 6 16:46:16 10.42.7.63 Aug 7 00:05:28 npf-sjca-pdp01 CISE_Passed_Authentications 0001970225 1 0 2014-08-07 00:05:28.140 -07:00 0098665945 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-BE-F6, Protocol=Radius, RequestLatency=53, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6bef6, NAS-IP-Address=10.34.75.4, NAS-Port=50244, Service-Type=Call Check, Framed-IP-Address=10.34.75.9, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AB, Calling-Station-ID=BC-30-5B-E6-BE-F6, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/44, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF0CC7708085, OriginalUserName=bc305be6bef6, AcsSessionID=npf-sjca-pdp01/195491152/2085483, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF0CC7708085, EndPointMACAddress=BC-30-5B-E6-BE-F6, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:BE:F6; User-Name=BC-30-5B-E6-BE-F6; State=ReauthSession:0A2250250007AF0CC7708085; Class=CACS:0A2250250007AF0CC7708085:npf-sjca-pdp01/195491152/2085483; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF0CC7708085&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=bfe8e250ab1891dfcefed773f48cd73d; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:46:16 10.42.7.64 Aug 7 00:05:28 npf-sjca-pdp02 CISE_Passed_Authentications 0000370926 1 0 2014-08-07 00:05:28.240 -07:00 0011268174 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.34.76.212, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=host/mickaye-WS.cisco.com, Protocol=Radius, RequestLatency=46, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=host/mickaye-WS.cisco.com, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a224cd40002c09f53d6bb6e\;41SessionID=npf-sjca-pdp02/195481465/270982\;, Called-Station-ID=a4-56-30-0f-7e-30:Blizzard-ISE, Calling-Station-ID=24-77-03-50-16-e0, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 606, undefined-89=
+Aug 6 16:46:16 10.42.7.63 Aug 7 00:05:28 npf-sjca-pdp01 CISE_Passed_Authentications 0001970226 1 0 2014-08-07 00:05:28.384 -07:00 0098666099 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.150.68, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=jdoe, Protocol=Radius, RequestLatency=51, NetworkDeviceName=EXAMPLE, User-Name=jdoe, NAS-IP-Address=10.34.150.68, NAS-Port=60000, Service-Type=Framed, Framed-IP-Address=10.34.137.144, Framed-MTU=1449, State=37CPMSessionID=0a22964453e2ae150000038a\;42SessionID=npf-sjca-pdp01/195491152/2085484\;, Called-Station-ID=18-33-9d-71-aa-40:alpha, Calling-Station-ID=48-F8-B3-7B-E6-7C, NAS-Port-Type=Wireless - IEEE 802.11, NAS-Port-Id=Capwap9, EAP-Key-Name=, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0a22964453e2ae150000038a, cisco-av-pair=method=dot1x, cisco-av-pair=cisco-wlan-ssid=alpha, Airespace-Wlan-Id=1, AcsSessionID=npf-sjca-pdp01/195491152/2085484, AuthenticationIdentityStore=CiscoAD, AuthenticationMethod=MSCHAPV2, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=PermitAccess, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12302, Step=12318, Step=12800, Step=12805, Step=12806, Step=12807, Step=12810, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12318, Step=12812, Step=12804, Step=12801, Step=12802, Step=12816, Step=12310, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12313, Step=11521, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11522, Step=11806, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11808, Step=15041, Step=15006, Step=22072, Step=15013, Step=24430, Step=24325, Step=24313, Step=24319, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24367, Step=24323, Step=24343, Step=24402, Step=22037, Step=11824, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11810, Step=11814, Step=11519, Step=12314, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=24423, Step=15036, Step=24432, Step=24355, Step=24416, Step=24355, Step=24420, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=12306, Step=11503, Step=11002, SelectedAuthenticationIdentityStores=CiscoAD, SelectedAuthenticationIdentityStores=Internal Endpoints, SelectedAuthenticationIdentityStores=Internal Users, SelectedAuthenticationIdentityStores=Guest Users, NetworkDeviceGroups=Location#All Locations#SJC#WNBU, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC#NGWC, AuthorizationPolicyMatchedRule=Default, EapTunnel=PEAP, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0a22964453e2ae150000038a, EndPointMACAddress=48-F8-B3-7B-E6-7C, PostureAssessmentStatus=NotApplicable, ISEPolicySetName=Building_SJC14_WNBU, AllowedProtocolMatchedRule=WNBU_SJC14_Wireless_Dot1x, IdentitySelectionMatchedRule=Default, AD-Domain=cisco.com, AD-User-Resolved-Identities=jdoe@cisco.com, AD-User-Candidate-Identities=jdoe@cisco.com, AD-User-Join-Point=CISCO.COM, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9=WNBU_SJC14_Wireless_Dot1x, StepData=72=EAP_TLS_BYOD, StepData=73=CiscoAD, StepData=74=CiscoAD, StepData=75=jdoe, StepData=76=cisco.com, StepData=77=cisco.com, StepData=78=icm.cisco.com\,Domain trust direction is one-way, StepData=79=sea-alpha.cisco.com\,Domain trust direction is one-way, StepData=80=partnet.cisco.com\,Domain trust direction is one-way, StepData=81=IL.NDS.COM\,Domain trust direction is one-way, StepData=82=UK.NDS.COM\,Domain trust direction is one-way, StepData=83=SN.local\,Domain trust direction is one-way, StepData=84=webex.local\,Domain trust direction is one-way, StepData=85=in.nds.com\,Domain trust direction is one-way, StepData=86=US.NDS.COM\,Domain trust direction is one-way, StepData=88=jdoe@cisco.com, StepData=89=CiscoAD, StepData=108=CiscoAD, StepData=109=cisco.com, StepData=110=CiscoAD, StepData=111=cisco.com, StepData=112=CiscoAD, StepData=113= CiscoAD.ExternalGroups, StepData=114= Radius.Service-Type, StepData=115= Radius.NAS-Port-Type, StepData=116= Session.Device-OS, StepData=117= Radius.Called-Station-ID, StepData=118=Default, AD-User-Resolved-DNs=CN=jdoe\,OU=Employees\,OU=Cisco Users\,DC=cisco\,DC=com, AD-User-DNS-Domain=cisco.com, AD-Groups-Names=cisco.com/Users/Domain Users, AD-User-NetBios-Name=CISCO, Location=Location#All Locations#SJC#WNBU, Device Type=Device Type#All Device Types#Wireless#WLC#NGWC, IdentityAccessRestricted=false, Response={State=ReauthSession:0a22964453e2ae150000038a; Class=CACS:0a22964453e2ae150000038a:npf-sjca-pdp01/195491152/2085484; EAP-Key-Name=19:53:e3:25:39:51:ff:85:80:09:d9:ce:e7:3f:89:92:55:30:9d:84:40:eb:6e:34:ab:3d:81:06:b2:c2:cc:1f:dc:53:e3:25:38:f6:b9:5b:d3:6a:a5:9a:de:ed:4b:ad:c3:19:90:68:12:f5:e8:9b:1a:04:2f:76:24:3d:ce:4e:e5; MS-MPPE-Send-Key=****; MS-MPPE-Recv-Key=****; LicenseTypes=1; },
+Aug 6 16:46:20 10.34.84.145 Aug 7 00:05:32 stage-pdp01 CISE_Passed_Authentications 0000024639 1 0 2014-08-07 00:05:32.974 -07:00 0000287131 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=113, Device IP Address=10.34.76.212, DestinationIPAddress=10.34.84.145, DestinationPort=1812, UserName=60-03-08-E2-F3-90, Protocol=Radius, RequestLatency=25, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=600308e2f390, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Call Check, Framed-MTU=1300, Called-Station-ID=04-da-d2-91-68-00:Astage-selfsponsor, Calling-Station-ID=60-03-08-e2-f3-90, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 601, cisco-av-pair=audit-session-id=0a224cd40002fad653e29f73, Airespace-Wlan-Id=5, OriginalUserName=600308e2f390, AcsSessionID=stage-pdp01/196593288/19335, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=Guest_Redirect_Selfservice, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled:Apple-iPad, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC, AuthorizationPolicyMatchedRule=Alpha_Guest_Registration, UserType=Host, CPMSessionID=0a224cd40002fad653e29f73, EndPointMACAddress=60-03-08-E2-F3-90, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Apple-iPad, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Stage_SJCM_Guest_Selfsponsor, AllowedProtocolMatchedRule=Stage_SelfSponosr_Auth, IdentitySelectionMatchedRule=Default, StepData=5= Radius.Service-Type, StepData=6= DEVICE.Location, StepData=7= DEVICE.Device Type, StepData=8= Radius.Called-Station-ID, StepData=9= Radius.NAS-Port-Type, StepData=10=Stage_SelfSponosr_Auth, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Radius.Called-Station-ID, StepData=22=Alpha_Guest_Registration, HostIdentityGroup=Endpoint Identity Groups:Profiled:Apple-iPad, Model Name=5508, Software Version=7.3.113.109, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wireless#WLC, Response={UserName=60:03:08:E2:F3:90; User-Name=60-03-08-E2-F3-90; State=ReauthSession:0a224cd40002fad653e29f73; Class=CACS:0a224cd40002fad653e29f73:stage-pdp01/196593288/19335; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://stage-pdp01.cisco.com:8443/portal/gateway?sessionId=0a224cd40002fad653e29f73&portal=b15a9aa0-1cde-11e4-8ade-000c29afdc76&action=cwa&token=d5325677244c6698e542e6443bfe0aee; cisco-av-pair=profile-name=Apple-iPad; LicenseTypes=1; },
+Aug 6 16:46:21 10.42.7.63 Aug 7 00:05:33 npf-sjca-pdp01 CISE_Passed_Authentications 0001970238 1 0 2014-08-07 00:05:33.261 -07:00 0098666872 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=54, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF0DC7709451, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085502, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF0DC7709451, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AF0DC7709451; Class=CACS:0A2250250007AF0DC7709451:npf-sjca-pdp01/195491152/2085502; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF0DC7709451&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=7d97cf8182ab2a8e3240660f9fc23041; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:46:30 10.42.7.63 Aug 7 00:05:42 npf-sjca-pdp01 CISE_Passed_Authentications 0001970248 1 0 2014-08-07 00:05:42.933 -07:00 0098667378 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=joreeder, Protocol=Radius, RequestLatency=26, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=joreeder, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055cde71ee353\;42SessionID=npf-sjca-pdp01/195491152/2085516\;, Called-Station-ID=001f9e28ffa0:alpha, Calling-Station-ID=28cfe91318d9, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:46:39 10.42.7.63 Aug 7 00:05:51 npf-sjca-pdp01 CISE_Passed_Authentications 0001970268 1 0 2014-08-07 00:05:51.754 -07:00 0098667787 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=seadams, Protocol=Radius, RequestLatency=43, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab00000029610fd853\;42SessionID=npf-sjca-pdp01/195491152/2085536\;, Called-Station-ID=0023045cced0:alpha_phone, Calling-Station-ID=0026cb002f20, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:46:54 10.42.7.63 Aug 7 00:06:06 npf-sjca-pdp01 CISE_Passed_Authentications 0001970303 1 0 2014-08-07 00:06:06.341 -07:00 0098669360 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=jeffport@cisco.com, Protocol=Radius, RequestLatency=37, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=jeffport@cisco.com, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000055ff5d25e353\;42SessionID=npf-sjca-pdp01/195491152/2085570\;, Called-Station-ID=508789bb8c90:alpha, Calling-Station-ID=28cfe91a5a49, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:46:57 10.42.7.63 Aug 7 00:06:09 npf-sjca-pdp01 CISE_Passed_Authentications 0001970314 1 0 2014-08-07 00:06:09.490 -07:00 0098669883 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=54, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF0EC7711F4D, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085581, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF0EC7711F4D, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AF0EC7711F4D; Class=CACS:0A2250250007AF0EC7711F4D:npf-sjca-pdp01/195491152/2085581; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF0EC7711F4D&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=a75451657930cdd77b363807c733e3c2; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:47:15 10.42.7.63 Aug 7 00:06:27 npf-sjca-pdp01 CISE_Passed_Authentications 0001970332 1 0 2014-08-07 00:06:27.955 -07:00 0098670019 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-BE-F6, Protocol=Radius, RequestLatency=61, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6bef6, NAS-IP-Address=10.34.75.4, NAS-Port=50244, Service-Type=Call Check, Framed-IP-Address=10.34.75.9, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AB, Calling-Station-ID=BC-30-5B-E6-BE-F6, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/44, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF10C7716AE5, OriginalUserName=bc305be6bef6, AcsSessionID=npf-sjca-pdp01/195491152/2085616, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF10C7716AE5, EndPointMACAddress=BC-30-5B-E6-BE-F6, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:BE:F6; User-Name=BC-30-5B-E6-BE-F6; State=ReauthSession:0A2250250007AF10C7716AE5; Class=CACS:0A2250250007AF10C7716AE5:npf-sjca-pdp01/195491152/2085616; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF10C7716AE5&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=883f0e1dd91147aa7a0265157dca51d3; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:47:20 10.42.7.64 Aug 7 00:06:32 npf-sjca-pdp02 CISE_Passed_Authentications 0000370936 1 0 2014-08-07 00:06:32.938 -07:00 0011268305 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.34.76.212, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=maswank, Protocol=Radius, RequestLatency=55, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=maswank, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a224cd40002fdf253e32578\;41SessionID=npf-sjca-pdp02/195481465/270989\;, Called-Station-ID=04-da-d2-91-68-00:alpha_example, Calling-Station-ID=00-21-6a-ab-3a-fe, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 601, undefined-89=
+Aug 6 16:47:29 10.42.7.64 Aug 7 00:06:41 npf-sjca-pdp02 CISE_Passed_Authentications 0000370938 1 0 2014-08-07 00:06:41.919 -07:00 0011268424 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.129.4, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=host/ANOY-WS01.cisco.com, Protocol=Radius, RequestLatency=66, NetworkDeviceName=NTN-WLC1, User-Name=host/ANOY-WS01.cisco.com, NAS-IP-Address=10.56.129.4, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a388104000045d853e2c504\;41SessionID=npf-sjca-pdp02/195481465/270991\;, Called-Station-ID=70-10-5c-f3-2f-80:alpha_example, Calling-Station-ID=e8-2a-ea-23-5e-3d, NAS-Identifier=ntn01-11a-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 604, undefined-89=
+Aug 6 16:47:31 10.42.7.63 Aug 7 00:06:43 npf-sjca-pdp01 CISE_Passed_Authentications 0001970347 1 0 2014-08-07 00:06:43.315 -07:00 0098670832 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=56, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF11C771A5C9, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085649, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF11C771A5C9, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AF11C771A5C9; Class=CACS:0A2250250007AF11C771A5C9:npf-sjca-pdp01/195491152/2085649; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF11C771A5C9&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=5810c2c09f8831a49e23411dbb694159; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:47:46 10.42.7.63 Aug 7 00:06:58 npf-sjca-pdp01 CISE_Passed_Authentications 0001970359 1 0 2014-08-07 00:06:58.682 -07:00 0098671317 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-BE-F6, Protocol=Radius, RequestLatency=61, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6bef6, NAS-IP-Address=10.34.75.4, NAS-Port=50244, Service-Type=Call Check, Framed-IP-Address=10.34.75.9, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AB, Calling-Station-ID=BC-30-5B-E6-BE-F6, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/44, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF13C771E015, OriginalUserName=bc305be6bef6, AcsSessionID=npf-sjca-pdp01/195491152/2085669, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF13C771E015, EndPointMACAddress=BC-30-5B-E6-BE-F6, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:BE:F6; User-Name=BC-30-5B-E6-BE-F6; State=ReauthSession:0A2250250007AF13C771E015; Class=CACS:0A2250250007AF13C771E015:npf-sjca-pdp01/195491152/2085669; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF13C771E015&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=b643fd4a0fa044f879be57ca7603c879; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:47:58 10.42.7.63 Aug 7 00:07:10 npf-sjca-pdp01 CISE_Passed_Authentications 0001970365 1 0 2014-08-07 00:07:10.166 -07:00 0098671620 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=bbobinde, Protocol=Radius, RequestLatency=51, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=bbobinde, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000056019d25e353\;42SessionID=npf-sjca-pdp01/195491152/2085682\;, Called-Station-ID=ec447680bc70:alpha, Calling-Station-ID=9494260719b4, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:48:00 10.42.7.63 Aug 7 00:07:12 npf-sjca-pdp01 CISE_Passed_Authentications 0001970369 1 0 2014-08-07 00:07:12.156 -07:00 0098671767 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=seadams, Protocol=Radius, RequestLatency=35, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab00000029610fd853\;42SessionID=npf-sjca-pdp01/195491152/2085694\;, Called-Station-ID=0023045cced0:alpha_phone, Calling-Station-ID=0026cb002f20, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:48:04 10.42.7.63 Aug 7 00:07:16 npf-sjca-pdp01 CISE_Passed_Authentications 0001970377 1 0 2014-08-07 00:07:16.938 -07:00 0098671914 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=selinay, Protocol=Radius, RequestLatency=49, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000054366df7e253\;42SessionID=npf-sjca-pdp01/195491152/2085703\;, Called-Station-ID=002304cd1f10:alpha_phone, Calling-Station-ID=0026cb006812, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:48:06 10.42.7.63 Aug 7 00:07:18 npf-sjca-pdp01 CISE_Passed_Authentications 0001970381 1 0 2014-08-07 00:07:18.174 -07:00 0098671958 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=58, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF14C7722F16, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085708, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF14C7722F16, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AF14C7722F16; Class=CACS:0A2250250007AF14C7722F16:npf-sjca-pdp01/195491152/2085708; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF14C7722F16&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=3d757b08549abb7525c4da546906f53c; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:48:25 10.42.7.64 Aug 7 00:07:37 npf-sjca-pdp02 CISE_Passed_Authentications 0000370956 1 0 2014-08-07 00:07:37.865 -07:00 0011268585 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.34.76.212, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=maswank, Protocol=Radius, RequestLatency=51, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=maswank, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a224cd40002fdf253e32578\;41SessionID=npf-sjca-pdp02/195481465/271003\;, Called-Station-ID=a4-56-30-0f-78-80:alpha_example, Calling-Station-ID=00-21-6a-ab-3a-fe, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 601, undefined-89=
+Aug 6 16:48:28 10.42.7.64 Aug 7 00:07:40 npf-sjca-pdp02 CISE_Passed_Authentications 0000370960 1 0 2014-08-07 00:07:40.066 -07:00 0011268687 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.72.127, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=host/salfi-pc.cisco.com, Protocol=Radius, RequestLatency=94, NetworkDeviceName=ntn01-11a-sw4, User-Name=host/salfi-pc.cisco.com, NAS-IP-Address=10.56.72.127, NAS-Port=50212, Service-Type=Framed, Framed-IP-Address=10.56.111.14, Framed-MTU=1500, State=37CPMSessionID=0A38487F0000039ABDACC6F4\;41SessionID=npf-sjca-pdp02/195481465/271002\;, Called-Station-ID=00-26-99-28-5E-BB, Calling-Station-ID=3C-97-0E-C3-F8-F1, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/12, EAP-Key-Name=, cisco-av-pair=cts-pac-opaque=****, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0A38487F0000039ABDACC6F4, MisconfiguredClientFixReason=Passed, AcsSessionID=npf-sjca-pdp02/195481465/271002, AuthenticationIdentityStore=CiscoAD, AuthenticationMethod=MSCHAPV2, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=Wired_prePosture, IdentityGroup=Endpoint Identity Groups:Profiled:Workstation, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12302, Step=12318, Step=12800, Step=12805, Step=12806, Step=12807, Step=12810, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12318, Step=12812, Step=12804, Step=12801, Step=12802, Step=12816, Step=12310, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12313, Step=11521, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11522, Step=11806, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11808, Step=15041, Step=15006, Step=22072, Step=15013, Step=24431, Step=24325, Step=24313, Step=24319, Step=24323, Step=24343, Step=24470, Step=22037, Step=11824, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11810, Step=11814, Step=11519, Step=12314, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=15036, Step=15048, Step=15048, Step=24433, Step=24355, Step=24435, Step=24355, Step=24458, Step=24100, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=12306, Step=11503, Step=11002, Step=5239, SelectedAuthenticationIdentityStores=CiscoAD, SelectedAuthenticationIdentityStores=Internal Endpoints, SelectedAuthenticationIdentityStores=Internal Users, SelectedAuthenticationIdentityStores=Guest Users, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=NTN-Wired-Pre_Posture, EapTunnel=PEAP, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0A38487F0000039ABDACC6F4, EndPointMACAddress=3C-97-0E-C3-F8-F1, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Windows8-Workstation, ISEPolicySetName=Location_NTN_Wired, AllowedProtocolMatchedRule=NTN_Wired_Dot1x, IdentitySelectionMatchedRule=Default, AD-Domain=cisco.com, AD-Host-Resolved-Identities=SALFI-PC$@cisco.com, AD-Host-Candidate-Identities=SALFI-PC$@cisco.com, AD-Host-Join-Point=CISCO.COM, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9= DEVICE.Device Type, StepData=10=NTN_Wired_Dot1x, StepData=73=EAP_TLS_BYOD, StepData=74=CiscoAD, StepData=75=CiscoAD, StepData=76=host/salfi-pc.cisco.com, StepData=77=cisco.com, StepData=78=cisco.com, StepData=80=SALFI-PC$@cisco.com, StepData=81=CiscoAD, StepData=99= Radius.Service-Type, StepData=100= Radius.NAS-Port-Type, StepData=101=CiscoAD, StepData=102=cisco.com, StepData=103=CiscoAD, StepData=104=cisco.com, StepData=105=CiscoAD, StepData=106=CiscoAD, StepData=107= CiscoAD.ExternalGroups, StepData=108= Session.PostureStatus, StepData=109= DEVICE.Device Type, StepData=110=NTN-Wired-Pre_Posture, AD-Host-Resolved-DNs=CN=SALFI-PC\,OU=Workstations\,OU=Cisco Computers\,DC=cisco\,DC=com, AD-Host-DNS-Domain=cisco.com, AD-Groups-Names=cisco.com/Users/Domain Computers, AD-Host-NetBios-Name=CISCO, HostIdentityGroup=Endpoint Identity Groups:Profiled:Workstation, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, IdentityAccessRestricted=false, ExternalGroups=s-1-5-21-1708537768-1303643608-725345543-515, Response={State=ReauthSession:0A38487F0000039ABDACC6F4; Class=CACS:0A38487F0000039ABDACC6F4:npf-sjca-pdp02/195481465/271002; EAP-Key-Name=19:53:e3:25:b8:21:ae:2a:ee:8c:ab:29:4f:b5:25:31:3f:f3:ce:8f:67:01:d8:83:3d:c4:b7:f7:08:6b:ad:d1:d5:53:e3:25:b9:06:d3:e9:6c:95:49:9f:bd:aa:5a:aa:fe:4a:cd:fe:e7:ef:a1:8a:f8:8f:5f:3e:7b:25:48:0f:e3; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf.example.com:8443/portal/gateway?sessionId=0A38487F0000039ABDACC6F4&portal=0303a6c2-121d-11e4-91bc-005056811954&action=cpp&token=ccd494958b2a3ae24acfa395444fd54e; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; MS-MPPE-Send-Key=****; MS-MPPE-Recv-Key=****; LicenseTypes=1; },
+Aug 6 16:48:30 10.42.7.63 Aug 7 00:07:42 npf-sjca-pdp01 CISE_Passed_Authentications 0001970421 1 0 2014-08-07 00:07:42.411 -07:00 0098673586 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=wisantos@cisco.com, Protocol=Radius, RequestLatency=25, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=wisantos@cisco.com, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab00005602bd25e353\;42SessionID=npf-sjca-pdp01/195491152/2085761\;, Called-Station-ID=a8b1d49cc490:alpha, Calling-Station-ID=28cfe91ca8e3, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
+Aug 6 16:48:31 10.42.7.64 Aug 7 00:07:43 npf-sjca-pdp02 CISE_Passed_Authentications 0000370964 1 0 2014-08-07 00:07:43.823 -07:00 0011268723 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.129.4, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=54-26-96-78-2C-E8, Protocol=Radius, RequestLatency=93, NetworkDeviceName=NTN-WLC1, User-Name=542696782ce8, NAS-IP-Address=10.56.129.4, NAS-Port=1, Service-Type=Call Check, Framed-MTU=1300, Called-Station-ID=b8-62-1f-44-92-80:alpha-guest, Calling-Station-ID=54-26-96-78-2c-e8, NAS-Identifier=ntn01-11a-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 603, cisco-av-pair=audit-session-id=0a388104000045d953e2c545, Airespace-Wlan-Id=2, OriginalUserName=542696782ce8, AcsSessionID=npf-sjca-pdp02/195481465/271007, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=WLC_NTN_CWA, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled:Apple-iPhone, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wireless#WLC, AuthorizationPolicyMatchedRule=Wireless-Dual_SSID, UserType=Host, CPMSessionID=0a388104000045d953e2c545, EndPointMACAddress=54-26-96-78-2C-E8, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Apple-iPhone, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Location_NTN_Wireless, AllowedProtocolMatchedRule=Byod-MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= Radius.NAS-IP-Address, StepData=9= DEVICE.Device Type, StepData=10= Radius.NAS-Port-Type, StepData=11=Byod-MAB, StepData=14=Internal Endpoints, StepData=20= Network Access.Device IP Address, StepData=21= Radius.Service-Type, StepData=22= Radius.NAS-Port-Type, StepData=23= Airespace.Airespace-Wlan-Id, StepData=24=Wireless-Dual_SSID, HostIdentityGroup=Endpoint Identity Groups:Profiled:Apple-iPhone, Model Name=5508, Software Version=7.0.114.x, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wireless#WLC, Response={UserName=54:26:96:78:2C:E8; User-Name=54-26-96-78-2C-E8; State=ReauthSession:0a388104000045d953e2c545; Class=CACS:0a388104000045d953e2c545:npf-sjca-pdp02/195481465/271007; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT-NSP; cisco-av-pair=url-redirect=https://npf.example.com:8443/portal/gateway?sessionId=0a388104000045d953e2c545&portal=2aff6652-121d-11e4-91bc-005056811954&action=cwa&token=4cf8e99f6378a31c6fccf59f0968d671; cisco-av-pair=profile-name=Apple-iPhone; Airespace-ACL-Name=ACL-WEBAUTH-REDIRECT-NSP; LicenseTypes=1; },
+Aug 6 16:48:40 10.42.7.63 Aug 7 00:07:52 npf-sjca-pdp01 CISE_Passed_Authentications 0001970436 1 0 2014-08-07 00:07:52.996 -07:00 0098674299 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=49, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF16C772B746, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085786, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF16C772B746, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AF16C772B746; Class=CACS:0A2250250007AF16C772B746:npf-sjca-pdp01/195491152/2085786; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF16C772B746&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=c90ec32565114d064ed25118421c0fc2; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:48:45 10.42.7.63 Aug 7 00:07:57 npf-sjca-pdp01 CISE_Passed_Authentications 0001970453 1 0 2014-08-07 00:07:57.281 -07:00 0098675207 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=selinay, Protocol=Radius, RequestLatency=26, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000054366df7e253\;42SessionID=npf-sjca-pdp01/195491152/2085802\;, Called-Station-ID=002304cd1f10:alpha_phone, Calling-Station-ID=0026cb006812, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:48:46 10.42.7.63 Aug 7 00:07:58 npf-sjca-pdp01 CISE_Passed_Authentications 0001970457 1 0 2014-08-07 00:07:58.139 -07:00 0098675480 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-BE-F6, Protocol=Radius, RequestLatency=52, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6bef6, NAS-IP-Address=10.34.75.4, NAS-Port=50244, Service-Type=Call Check, Framed-IP-Address=10.34.75.9, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AB, Calling-Station-ID=BC-30-5B-E6-BE-F6, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/44, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF17C772CA76, OriginalUserName=bc305be6bef6, AcsSessionID=npf-sjca-pdp01/195491152/2085805, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF17C772CA76, EndPointMACAddress=BC-30-5B-E6-BE-F6, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:BE:F6; User-Name=BC-30-5B-E6-BE-F6; State=ReauthSession:0A2250250007AF17C772CA76; Class=CACS:0A2250250007AF17C772CA76:npf-sjca-pdp01/195491152/2085805; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF17C772CA76&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=4ee88766e3e644a5eddb82045adae0b5; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:48:46 10.42.7.63 Aug 7 00:07:58 npf-sjca-pdp01 CISE_Passed_Authentications 0001970458 1 0 2014-08-07 00:07:58.352 -07:00 0098675506 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=shpoon, Protocol=Radius, RequestLatency=23, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab0000556efe14e353\;42SessionID=npf-sjca-pdp01/195491152/2085801\;, Called-Station-ID=0023045b1920:alpha_phone, Calling-Station-ID=0024975b4a91, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:49:09 10.42.7.63 Aug 7 00:08:21 npf-sjca-pdp01 CISE_Passed_Authentications 0001970478 1 0 2014-08-07 00:08:21.374 -07:00 0098675904 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.86.102.138, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=tkelso, Protocol=Radius, RequestLatency=12, NetworkDeviceName=bxb22-11-alpha-wlc1, User-Name=tkelso, NAS-IP-Address=10.86.102.138, NAS-Port=13, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a56668a00000cd253e32608\;42SessionID=npf-sjca-pdp01/195491152/2085835\;, Called-Station-ID=04-da-d2-90-62-70:alpha_ipv4v6, Calling-Station-ID=88-53-95-79-00-52, NAS-Identifier=bxb22-11-alpha-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 750, undefined-89=
+Aug 6 16:49:10 10.42.7.63 Aug 7 00:08:22 npf-sjca-pdp01 CISE_Passed_Authentications 0001970481 1 0 2014-08-07 00:08:22.720 -07:00 0098676155 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=seadams, Protocol=Radius, RequestLatency=29, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab00000029610fd853\;42SessionID=npf-sjca-pdp01/195491152/2085841\;, Called-Station-ID=0023045cced0:alpha_phone, Calling-Station-ID=0026cb002f20, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:49:10 10.42.7.64 Aug 7 00:08:22 npf-sjca-pdp02 CISE_Passed_Authentications 0000370972 1 0 2014-08-07 00:08:22.945 -07:00 0011268897 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.34.76.212, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=jossanc2, Protocol=Radius, RequestLatency=58, NetworkDeviceName=sjcm-00a-npf-wlc1, User-Name=jossanc2, NAS-IP-Address=10.34.76.212, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=0a224cd40002e30753dfd120\;41SessionID=npf-sjca-pdp02/195481465/271009\;, Called-Station-ID=a4-56-30-0e-41-50:Blizzard-ISE, Calling-Station-ID=24-77-03-f4-70-58, NAS-Identifier=sjcm-00a-npf-wlc1, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 606, undefined-89=
+Aug 6 16:49:11 10.42.7.63 Aug 7 00:08:23 npf-sjca-pdp01 CISE_Passed_Authentications 0001970487 1 0 2014-08-07 00:08:23.749 -07:00 0098676451 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=10.34.75.4, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=BC-30-5B-E6-D2-15, Protocol=Radius, RequestLatency=58, NetworkDeviceName=sjcm-12a-npf-sw1, User-Name=bc305be6d215, NAS-IP-Address=10.34.75.4, NAS-Port=50243, Service-Type=Call Check, Framed-IP-Address=10.34.75.10, Framed-MTU=1500, Called-Station-ID=00-21-A0-C2-BF-AA, Calling-Station-ID=BC-30-5B-E6-D2-15, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/43, EAP-Key-Name=, cisco-av-pair=service-type=Call Check, cisco-av-pair=audit-session-id=0A2250250007AF18C7732C7E, OriginalUserName=bc305be6d215, AcsSessionID=npf-sjca-pdp01/195491152/2085847, AuthenticationIdentityStore=Internal Endpoints, AuthenticationMethod=Lookup, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=CWA-Redirect_Wired, UseCase=Host Lookup, IdentityGroup=Endpoint Identity Groups:Profiled, Step=11001, Step=11017, Step=11027, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15041, Step=15006, Step=15013, Step=24209, Step=24211, Step=22037, Step=24423, Step=15036, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=11002, SelectedAuthenticationIdentityStores=Internal Endpoints, NetworkDeviceGroups=Location#All Locations#SJC#SJCM1, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=SJCM_Guest _Wired_unknown, UserType=Host, CPMSessionID=0A2250250007AF18C7732C7E, EndPointMACAddress=BC-30-5B-E6-D2-15, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Dell-Device, DeviceRegistrationStatus=notRegistered, ISEPolicySetName=Building_SJCM1_Wired, AllowedProtocolMatchedRule=SJCM1_Wired_MAB, IdentitySelectionMatchedRule=Default, StepData=5= DEVICE.Location, StepData=6= Radius.Called-Station-ID, StepData=7= Radius.Service-Type, StepData=8= DEVICE.Device Type, StepData=9= Radius.NAS-Port-Type, StepData=10=SJCM1_Wired_MAB, StepData=13=Internal Endpoints, StepData=19= Radius.Service-Type, StepData=20= Radius.NAS-Port-Type, StepData=21= Session.PostureStatus, StepData=22= EndPoints.LogicalProfile, StepData=23=SJCM_Guest _Wired_unknown, HostIdentityGroup=Endpoint Identity Groups:Profiled, Model Name=Unknown, Software Version=Unknown, Location=Location#All Locations#SJC#SJCM1, Device Type=Device Type#All Device Types#Wired, PostureStatus=Unknown, Response={UserName=BC:30:5B:E6:D2:15; User-Name=BC-30-5B-E6-D2-15; State=ReauthSession:0A2250250007AF18C7732C7E; Class=CACS:0A2250250007AF18C7732C7E:npf-sjca-pdp01/195491152/2085847; cisco-av-pair=url-redirect-acl=ACL-WEBAUTH-REDIRECT; cisco-av-pair=url-redirect=https://npf-sjca-pdp01.cisco.com:8443/portal/gateway?sessionId=0A2250250007AF18C7732C7E&portal=1e06a122-121d-11e4-91bc-005056811954&action=cwa&token=990767800a3fc2014281bd89f2717483; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PRE-POSTURE-AD-4ffe0a92; cisco-av-pair=profile-name=Dell-Device; LicenseTypes=1; },
+Aug 6 16:49:14 10.42.7.63 Aug 7 00:08:26 npf-sjca-pdp01 CISE_Passed_Authentications 0001970492 1 0 2014-08-07 00:08:26.084 -07:00 0098676710 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=mkrummen, Protocol=Radius, RequestLatency=31, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000054f03809e353\;42SessionID=npf-sjca-pdp01/195491152/2085856\;, Called-Station-ID=0024c48d6e40:alpha_phone, Calling-Station-ID=001f9e8b6c9f, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:49:17 10.42.7.63 Aug 7 00:08:29 npf-sjca-pdp01 CISE_Passed_Authentications 0001970494 1 0 2014-08-07 00:08:29.095 -07:00 0098676845 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=mifowler, Protocol=Radius, RequestLatency=28, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=mifowler, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab00005603ec25e353\;42SessionID=npf-sjca-pdp01/195491152/2085859\;, Called-Station-ID=00254535f200:alpha_phone, Calling-Station-ID=8cfabaaf9099, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:49:21 10.42.7.63 Aug 7 00:08:33 npf-sjca-pdp01 CISE_Passed_Authentications 0001970500 1 0 2014-08-07 00:08:33.768 -07:00 0098677119 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=seadams, Protocol=Radius, RequestLatency=29, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab00000029610fd853\;42SessionID=npf-sjca-pdp01/195491152/2085864\;, Called-Station-ID=0023045cced0:alpha_phone, Calling-Station-ID=0026cb002f20, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:49:27 10.42.7.64 Aug 7 00:08:39 npf-sjca-pdp02 CISE_Passed_Authentications 0000370979 1 0 2014-08-07 00:08:39.134 -07:00 0011269054 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=240, Device IP Address=10.56.72.127, DestinationIPAddress=10.42.7.64, DestinationPort=1812, UserName=host/salfi-pc.cisco.com, Protocol=Radius, RequestLatency=66, NetworkDeviceName=ntn01-11a-sw4, User-Name=host/salfi-pc.cisco.com, NAS-IP-Address=10.56.72.127, NAS-Port=50212, Service-Type=Framed, Framed-IP-Address=10.56.111.14, Framed-MTU=1500, State=37CPMSessionID=0A38487F0000039ABDACC6F4\;41SessionID=npf-sjca-pdp02/195481465/271013\;, Called-Station-ID=00-26-99-28-5E-BB, Calling-Station-ID=3C-97-0E-C3-F8-F1, NAS-Port-Type=Ethernet, NAS-Port-Id=GigabitEthernet2/12, EAP-Key-Name=, cisco-av-pair=cts-pac-opaque=****, cisco-av-pair=service-type=Framed, cisco-av-pair=audit-session-id=0A38487F0000039ABDACC6F4, AcsSessionID=npf-sjca-pdp02/195481465/271013, AuthenticationIdentityStore=CiscoAD, AuthenticationMethod=MSCHAPV2, SelectedAccessService=Default Network Access, SelectedAuthorizationProfiles=Wired-PermitALL, SelectedAuthorizationProfiles=NTN01_Wired_WorkStations, IdentityGroup=Endpoint Identity Groups:Profiled:Workstation, Step=11001, Step=11017, Step=15049, Step=15008, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15048, Step=15004, Step=11507, Step=12300, Step=12625, Step=11006, Step=11001, Step=11018, Step=12302, Step=12318, Step=12800, Step=12805, Step=12806, Step=12807, Step=12810, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12318, Step=12812, Step=12804, Step=12801, Step=12802, Step=12816, Step=12310, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=12313, Step=11521, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11522, Step=11806, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11808, Step=15041, Step=15006, Step=22072, Step=15013, Step=24431, Step=24325, Step=24313, Step=24319, Step=24323, Step=24343, Step=24470, Step=22037, Step=11824, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=11810, Step=11814, Step=11519, Step=12314, Step=12305, Step=11006, Step=11001, Step=11018, Step=12304, Step=15036, Step=15048, Step=15048, Step=24433, Step=24355, Step=24435, Step=24355, Step=24458, Step=24100, Step=15048, Step=15048, Step=15004, Step=15016, Step=11022, Step=15016, Step=12306, Step=11503, Step=11002, SelectedAuthenticationIdentityStores=CiscoAD, SelectedAuthenticationIdentityStores=Internal Endpoints, SelectedAuthenticationIdentityStores=Internal Users, SelectedAuthenticationIdentityStores=Guest Users, NetworkDeviceGroups=Location#All Locations#NTN, NetworkDeviceGroups=Device Type#All Device Types#Wired, AuthorizationPolicyMatchedRule=NTN-Wired_Full_Access, EapTunnel=PEAP, EapAuthentication=EAP-MSCHAPv2, CPMSessionID=0A38487F0000039ABDACC6F4, EndPointMACAddress=3C-97-0E-C3-F8-F1, PostureAssessmentStatus=NotApplicable, EndPointMatchedProfile=Windows8-Workstation, ISEPolicySetName=Location_NTN_Wired, AllowedProtocolMatchedRule=NTN_Wired_Dot1x, IdentitySelectionMatchedRule=Default, AD-Domain=cisco.com, AD-Host-Resolved-Identities=SALFI-PC$@cisco.com, AD-Host-Candidate-Identities=SALFI-PC$@cisco.com, AD-Host-Join-Point=CISCO.COM, StepData=4= DEVICE.Location, StepData=5= Radius.Called-Station-ID, StepData=6= Radius.Service-Type, StepData=7= Radius.NAS-Port-Type, StepData=8= Radius.NAS-IP-Address, StepData=9= DEVICE.Device Type, StepData=10=NTN_Wired_Dot1x, StepData=73=EAP_TLS_BYOD, StepData=74=CiscoAD, StepData=75=CiscoAD, StepData=76=host/salfi-pc.cisco.com, StepData=77=cisco.com, StepData=78=cisco.com, StepData=80=SALFI-PC$@cisco.com, StepData=81=CiscoAD, StepData=99= Radius.Service-Type, StepData=100= Radius.NAS-Port-Type, StepData=101=CiscoAD, StepData=102=cisco.com, StepData=103=CiscoAD, StepData=104=cisco.com, StepData=105=CiscoAD, StepData=106=CiscoAD, StepData=107= CiscoAD.ExternalGroups, StepData=108= DEVICE.Device Type, StepData=109=NTN-Wired_Full_Access, AD-Host-Resolved-DNs=CN=SALFI-PC\,OU=Workstations\,OU=Cisco Computers\,DC=cisco\,DC=com, AD-Host-DNS-Domain=cisco.com, AD-Groups-Names=cisco.com/Users/Domain Computers, AD-Host-NetBios-Name=CISCO, HostIdentityGroup=Endpoint Identity Groups:Profiled:Workstation, Model Name=4503, Location=Location#All Locations#NTN, Device Type=Device Type#All Device Types#Wired, PostureStatus=Compliant, IdentityAccessRestricted=false, ExternalGroups=s-1-5-21-1708537768-1303643608-725345543-515, Response={State=ReauthSession:0A38487F0000039ABDACC6F4; Class=CACS:0A38487F0000039ABDACC6F4:npf-sjca-pdp02/195481465/271013; EAP-Key-Name=19:53:e3:25:f3:3f:a7:a0:80:24:e8:6a:67:22:21:4c:b2:6b:6d:d3:3d:d0:5c:ba:c7:5a:95:b2:12:48:0c:72:9a:53:e3:25:f4:20:a8:d0:dc:bc:b1:45:64:e3:68:13:ff:ef:d1:00:91:e8:dd:1b:f0:a2:d9:9b:4f:02:1a:6c:c7; cisco-av-pair=ACS:CiscoSecure-Defined-ACL=#ACSACL#-IP-PERMIT_ALL_TRAFFIC-4f57e406; cisco-av-pair=cts:security-group-tag=7981-0; MS-MPPE-Send-Key=****; MS-MPPE-Recv-Key=****; LicenseTypes=5; },
+Aug 6 16:49:27 10.42.7.63 Aug 7 00:08:39 npf-sjca-pdp01 CISE_Passed_Authentications 0001970502 1 0 2014-08-07 00:08:39.196 -07:00 0098677273 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=selinay, Protocol=Radius, RequestLatency=34, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=anonymous, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000054366df7e253\;42SessionID=npf-sjca-pdp01/195491152/2085872\;, Called-Station-ID=002304cd1f10:alpha_phone, Calling-Station-ID=0026cb006812, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 311, undefined-89=
+Aug 6 16:49:45 10.42.7.63 Aug 7 00:08:57 npf-sjca-pdp01 CISE_Passed_Authentications 0001970520 1 0 2014-08-07 00:08:57.124 -07:00 0098677974 5200 NOTICE Passed-Authentication: Authentication succeeded, ConfigVersionId=133, Device IP Address=171.70.35.137, DestinationIPAddress=10.42.7.63, DestinationPort=1812, UserName=bbobinde, Protocol=Radius, RequestLatency=47, NetworkDeviceName=WNBU-sjc14-00a-homeap4_mgmt, User-Name=bbobinde, NAS-IP-Address=171.70.35.137, NAS-Port=1, Service-Type=Framed, Framed-MTU=1300, State=37CPMSessionID=892346ab000056019d25e353\;42SessionID=npf-sjca-pdp01/195491152/2085904\;, Called-Station-ID=ec447680bc70:alpha, Calling-Station-ID=9494260719b4, NAS-Identifier=Cisco_cf:27:46, NAS-Port-Type=Wireless - IEEE 802.11, Tunnel-Type=(tag=0) VLAN, Tunnel-Medium-Type=(tag=0) 802, Tunnel-Private-Group-ID=(tag=0) 310, undefined-89=
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/LancopeParserTest.txt b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/LancopeParserTest.txt
new file mode 100644
index 0000000000..0e4bf74f2b
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/LancopeParserTest.txt
@@ -0,0 +1 @@
+{"message":"<131>Jul 17 15:59:01 smc-01 StealthWatch[12365]: 2014-07-17T15:58:30Z 10.40.10.254 0.0.0.0 Minor High Concern Index The host's concern index has either exceeded the CI threshold or rapidly increased. Observed 36.55M points. Policy maximum allows up to 20M points.","@version":"1","@timestamp":"2014-07-17T15:56:05.992Z","type":"syslog","host":"10.122.196.201"}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/SourcefireParserTest.txt b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/SourcefireParserTest.txt
new file mode 100644
index 0000000000..af257aa4b5
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/SourcefireParserTest.txt
@@ -0,0 +1,3 @@
+SFIMS: [Primary Detection Engine (a7213248-6423-11e3-8537-fac6a92b7d9d)][MTD Access Control] Connection Type: Start, User: Unknown, Client: Unknown, Application Protocol: Unknown, Web App: Unknown, Firewall Rule Name: MTD Access Control, Firewall Rule Action: Allow, Firewall Rule Reasons: Unknown, URL Category: Unknown, URL_Reputation: Risk unknown, URL: Unknown, Interface Ingress: s1p1, Interface Egress: N/A, Security Zone Ingress: Unknown, Security Zone Egress: N/A, Security Intelligence Matching IP: None, Security Intelligence Category: None, {TCP} 72.163.0.129:60517 -> 10.1.128.236:443
+snort: [1:3192:2] WEB-CLIENT Windows Media Player directory traversal via Content-Disposition attempt [Classification: Attempted User Privilege Gain] [Priority: 1] {TCP} 46.149.110.103:80 -> 192.168.56.102:1073
+SFIMS: Correlation Event: Open Soc Log Forwarding/Opensoc Log Forwarding at Thu Oct 23 04:55:39 2014 UTC: [1:19123:7] \"MALWARE-CNC Dropper Win.Trojan.Cefyns.A variant outbound connection\" [Impact: Unknown] From \"172.19.50.7\" at Thu Oct 23 04:55:38 2014 UTC [Classification: A Network Trojan was Detected] [Priority: 1] {tcp} 139.230.245.23:52078->72.52.4.91:80
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/multi_elb_log.txt b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/multi_elb_log.txt
new file mode 100644
index 0000000000..95d3fec8e3
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/multi_elb_log.txt
@@ -0,0 +1,10 @@
+2018-08-30T21:02:32.047266Z vault-development 192.168.113.53:60002 192.168.82.130:8200 0.000695 0.000017 0.000015 - - 607 3078 "- - - " "-" - -
+2018-08-30T21:02:22.119595Z vault-development 192.168.113.29:57322 192.168.72.75:8200 0.00051 0.00001 0.000013 - - 607 3079 "- - - " "-" - -
+2018-08-30T21:05:58.275961Z vault-production 192.168.205.159:58390 192.168.68.196:8200 0.000767 0.000009 0.000012 - - 673 3210 "- - - " "-" - -
+2018-08-30T21:05:59.222277Z vault-production 192.168.228.182:26358 192.168.81.224:8200 0.000882 0.000014 0.000024 - - 519 3920 "- - - " "-" - -
+2018-08-30T21:05:59.234471Z vault-production 192.168.228.182:35506 192.168.79.6:8200 0.000377 0.000011 0.000009 - - 519 3919 "- - - " "-" - -
+2018-08-30T21:05:59.237375Z vault-production 192.168.228.182:52516 192.168.68.196:8200 0.000628 0.000007 0.00001 - - 519 3918 "- - - " "-" - -
+2018-08-30T21:06:05.235460Z vault-production 192.168.228.182:41783 192.168.79.6:8200 0.000309 0.000006 0.00001 - - 519 3918 "- - - " "-" - -
+2018-08-30T21:06:05.226698Z vault-production 192.168.228.182:40008 192.168.81.224:8200 0.000955 0.000014 0.000013 - - 519 3919 "- - - " "-" - -
+2018-08-30T21:06:05.237946Z vault-production 192.168.228.182:19261 192.168.68.196:8200 0.000661 0.000006 0.000009 - - 519 3918 "- - - " "-" - -
+2018-08-30T21:06:11.229542Z vault-production 192.168.228.182:44082 192.168.81.224:8200 0.000912 0.000009 0.000014 - - 519 3919 "- - - " "-" - -
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/multi_elb_with_errors_log.txt b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/multi_elb_with_errors_log.txt
new file mode 100644
index 0000000000..3525fc40ec
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/logData/multi_elb_with_errors_log.txt
@@ -0,0 +1,13 @@
+2018-08-30T21:02:32.047266Z vault-development 192.168.113.53:60002 192.168.82.130:8200 0.000695 0.000017 0.000015 - - 607 3078 "- - - " "-" - -
+2018-08-30T21:02:22.119595Z vault-development 192.168.113.29:57322 192.168.72.75:8200 0.00051 0.00001 0.000013 - - 607 3079 "- - - " "-" - -
+2018-08-30T21:05:58.275961Z vault-production 192.168.205.159:58390 192.168.68.196:8200 0.000767 0.000009 0.000012 - - 673 3210 "- - - " "-" - -
+2018-08-30T21:05:59.222277Z vault-production 192.168.228.182:26358 192.168.81.224:8200 0.000882 0.000014 0.000024 - - 519 3920 "- - - " "-" - -
+BOOM
+BLAM
+BOP
+2018-08-30T21:05:59.234471Z vault-production 192.168.228.182:35506 192.168.79.6:8200 0.000377 0.000011 0.000009 - - 519 3919 "- - - " "-" - -
+2018-08-30T21:05:59.237375Z vault-production 192.168.228.182:52516 192.168.68.196:8200 0.000628 0.000007 0.00001 - - 519 3918 "- - - " "-" - -
+2018-08-30T21:06:05.235460Z vault-production 192.168.228.182:41783 192.168.79.6:8200 0.000309 0.000006 0.00001 - - 519 3918 "- - - " "-" - -
+2018-08-30T21:06:05.226698Z vault-production 192.168.228.182:40008 192.168.81.224:8200 0.000955 0.000014 0.000013 - - 519 3919 "- - - " "-" - -
+2018-08-30T21:06:05.237946Z vault-production 192.168.228.182:19261 192.168.68.196:8200 0.000661 0.000006 0.000009 - - 519 3918 "- - - " "-" - -
+2018-08-30T21:06:11.229542Z vault-production 192.168.228.182:44082 192.168.81.224:8200 0.000912 0.000009 0.000014 - - 519 3919 "- - - " "-" - -
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/adallom.cef b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/adallom.cef
new file mode 100644
index 0000000000..a35f3542f7
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/adallom.cef
@@ -0,0 +1 @@
+2016-04-01T09:29:11.356-0400 CEF:0|Adallom|Adallom|1.0|56fe779ee4b0459f4e9a484a|ALERT_CABINET_EVENT_MATCH_AUDIT|0|msg=Activity policy 'User download/view file' was triggered by 'person@example.com' suser=auser@example.com start=1459517280810 end=1459517280810 audits=["AVPR-4oIPeFmuZ3CKKrg","AVPR-wx80cd9PUpAu2aj","AVPR-6XGPeFmuZ3CKKvx","AVPSALn_qE4Kgs_8_yK9","AVPSASW3gw_f3aEvgEmi"] services=["APPID_SXC"] users=["another@example.com"] cs6=https://abcd-remote.console.arc.com/#/alerts/56fe779ee4b0459f4e9a484a cs6Label=consoleUrl
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/adallom.schema b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/adallom.schema
new file mode 100644
index 0000000000..a91cce0c96
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/adallom.schema
@@ -0,0 +1,37 @@
+{
+ "title": "Adallom Schema",
+ "type": "object",
+ "properties": {
+ "original_string": {
+ "type": "string"
+ },
+ "timestamp": {
+ "type": "integer"
+ },
+ "DeviceVendor": {
+ "type": "string"
+ },
+ "DeviceProduct": {
+ "type": "string"
+ },
+ "DeviceVersion": {
+ "type": "string"
+ },
+ "DeviceEvent": {
+ "type": "string"
+ },
+ "Name": {
+ "type": "string"
+ },
+ "Severity": {
+ "type": "integer"
+ },
+ "consoleUrl": {
+ "type": "string"
+ }
+ },
+ "required": [
+ "original_string", "timestamp",
+ "DeviceVendor", "DeviceProduct", "DeviceVersion", "Name", "Severity",
+ "consoleUrl"]
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.cef b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.cef
new file mode 100644
index 0000000000..9d4fe6f0b9
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.cef
@@ -0,0 +1 @@
+Mar 21 14:05:02 HHHPVATN1 CEF:0|Cyber-Ark|Vault|7.20.0091|295|Retrieve password|5|act=Retrieve password suser=spilgrim fname=Root\ABC phobos3 - COMP dvc=120.99.70.3 shost=10.44.134.78 dhost= duser= externalId= app= reason= cs1Label="Affected User Name" cs1= cs2Label="Safe Name" cs2=Security Vulnerability Mgmt cs3Label="Device Type" cs3= cs4Label="Database" cs4= cs5Label="Other info" cs5=101.198.70.93 cn1Label="Request Id" cn1= cn2Label="Ticket Id" cn2=Needed to verify config files being pulled msg=Needed to verify config files being pulled
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.json b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.json
new file mode 100644
index 0000000000..e900a9a388
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.json
@@ -0,0 +1,21 @@
+{
+ "\"Other info\"": "101.198.70.93",
+ "\"Safe Name\"": "Security Vulnerability Mgmt",
+ "\"Ticket Id\"": "Needed to verify config files being pulled ",
+ "deviceAction": "Retrieve password",
+ "deviceAddress": "120.99.70.3",
+ "device_product": "Vault",
+ "device_vendor": "Cyber-Ark",
+ "device_version": "7.20.0091",
+ "event_class_id": "295",
+ "event_name": "Retrieve password",
+ "fileName": "Root\\ABC phobos3 - COMP",
+ "header": "Mar 21 14:05:02 HHHPVATN1 CEF:0",
+ "message": "Needed to verify config files being pulled",
+ "original_string": "Mar 21 14:05:02 HHHPVATN1 CEF:0|Cyber-Ark|Vault|7.20.0091|295|Retrieve password|5|act=Retrieve password suser=spilgrim fname=Root\\ABC phobos3 - COMP dvc=120.99.70.3 shost=10.44.134.78 dhost= duser= externalId= app= reason= cs1Label=\"Affected User Name\" cs1= cs2Label=\"Safe Name\" cs2=Security Vulnerability Mgmt cs3Label=\"Device Type\" cs3= cs4Label=\"Database\" cs4= cs5Label=\"Other info\" cs5=101.198.70.93 cn1Label=\"Request Id\" cn1= cn2Label=\"Ticket Id\" cn2=Needed to verify config files being pulled msg=Needed to verify config files being pulled",
+ "severity": "5",
+ "source.type": "cyberark",
+ "src_hostname": "10.44.134.78",
+ "src_username": "spilgrim",
+ "timestamp": 1458569102000
+}
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.schema b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.schema
new file mode 100644
index 0000000000..5bd1021c87
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/cyberark.schema
@@ -0,0 +1,38 @@
+{
+ "title": "CyberArk Schema",
+ "type": "object",
+ "properties": {
+ "ip_src_addr": {
+ "type": "string"
+ },
+ "ip_dst_addr": {
+ "type": "string"
+ },
+ "original_string": {
+ "type": "string"
+ },
+ "timestamp": {
+ "type": "integer"
+ },
+ "DeviceVendor": {
+ "type": "string"
+ },
+ "DeviceProduct": {
+ "type": "string"
+ },
+ "DeviceVersion": {
+ "type": "string"
+ },
+ "DeviceEvent": {
+ "type": "string"
+ },
+ "Name": {
+ "type": "string"
+ },
+ "Severity": {
+ "type": "integer"
+ }
+ },
+ "required": ["original_string", "timestamp",
+ "DeviceVendor", "DeviceProduct", "DeviceVersion", "Name", "Severity"]
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/palo.cef b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/palo.cef
new file mode 100644
index 0000000000..ab9b830923
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/palo.cef
@@ -0,0 +1 @@
+<14>Apr 7 10:10:10 hostname CEF: 0|Palo Alto Networks|PAN-OS|6.1.3|url|THREAT|1|rt=Apr 07 2017 00:10:10 GMT deviceExternalId=00000000 src=10.10.10.10 dst=20.20.20.20 sourceTranslatedAddress=0.0.0.0 destinationTranslatedAddress=0.0.0.0 cs1Label=Rule cs1=Trusted-to-Untrusted suser= duser= app=ssl cs3Label=Virtual Sys cs3=vsys2 cs4Label=Src Zone cs4=Trusted cs5Label=Dst Zone cs5=Untrusted deviceInboundInterface=ethernet1/12.345 deviceOutboundInterface=ethernet1/12.345 cs6Label=LogProfile cs6=Log_Profile cn1Label=SessionID cn1=123456 cnt=1 spt=18371 dpt=443 sourceTranslatedPort=0 destinationTranslatedPort=0 flexString1Label=Flags flexString1=0x8000 proto=tcp act=alert request=\"www.example.com/\" cs2Label=URL Cat cs2=gambling flexString2Label=Direction flexString2=client-to-server externalId=123456789 requestContext= cat=(9999) filePath= fileId=0 fileHash= deviceProcessName=Device.Process.Name
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/palo.schema b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/palo.schema
new file mode 100644
index 0000000000..71356349e3
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/palo.schema
@@ -0,0 +1,38 @@
+{
+ "title": "PaloAlto Schema",
+ "type": "object",
+ "properties": {
+ "ip_src_addr": {
+ "type": "string"
+ },
+ "ip_dst_addr": {
+ "type": "string"
+ },
+ "original_string": {
+ "type": "string"
+ },
+ "timestamp": {
+ "type": "integer"
+ },
+ "DeviceVendor": {
+ "type": "string"
+ },
+ "DeviceProduct": {
+ "type": "string"
+ },
+ "DeviceVersion": {
+ "type": "string"
+ },
+ "DeviceEvent": {
+ "type": "string"
+ },
+ "Name": {
+ "type": "string"
+ },
+ "Severity": {
+ "type": "integer"
+ }
+ },
+ "required": ["original_string", "timestamp",
+ "DeviceVendor", "DeviceProduct", "DeviceVersion", "Name", "Severity"]
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/waf.cef b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/waf.cef
new file mode 100644
index 0000000000..86e1d6ba14
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/waf.cef
@@ -0,0 +1 @@
+<14>CEF:0|Imperva Inc.|SecureSphere|10.0.0.4_16|ABC - Secure Login.vm Page Rate Limit UK - Source IP||High|act=alert dst=17.43.200.42 dpt=88 duser=${Alert.username} src=10.31.45.69 spt=34435 proto=TCP rt=31 March 2016 13:04:55 cat=Alert cs1= cs1Label=Policy cs2=ABC-Secure cs2Label=ServerGroup cs3=servers_svc cs3Label=ServiceName cs4=server_app cs4Label=ApplicationName cs5=QA cs5Label=Description
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/waf.schema b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/waf.schema
new file mode 100644
index 0000000000..b38485ccba
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/org/apache/metron/parsers/cef/waf.schema
@@ -0,0 +1,67 @@
+{
+ "title": "WAF CEF Schema",
+ "type": "object",
+ "properties": {
+ "ip_src_addr": {
+ "type": "string"
+ },
+ "ip_src_port": {
+ "type": "integer"
+ },
+ "ip_dst_addr": {
+ "type": "string"
+ },
+ "ip_dst_port": {
+ "type": "integer"
+ },
+ "original_string": {
+ "type": "string"
+ },
+ "@version": {
+ "type": "string"
+ },
+ "timestamp": {
+ "type": "integer"
+ },
+ "type": {
+ "type": "string"
+ },
+ "DeviceVendor": {
+ "type": "string"
+ },
+ "DeviceProduct": {
+ "type": "string"
+ },
+ "DeviceVersion": {
+ "type": "string"
+ },
+ "DeviceEvent": {
+ "type": "string"
+ },
+ "Name": {
+ "type": "string"
+ },
+ "Severity": {
+ "type": "integer"
+ },
+ "cat": {
+ "type": "string"
+ },
+ "ServerGroup": {
+ "type": "string"
+ },
+ "ServiceName": {
+ "type": "string"
+ },
+ "ApplicationName": {
+ "type": "string"
+ },
+ "Description": {
+ "type": "string"
+ }
+ },
+ "required": ["ip_src_addr", "ip_dst_addr", "ip_src_port", "ip_dst_port", "original_string", "timestamp",
+ "DeviceVendor", "DeviceProduct", "DeviceVersion", "Name", "Severity",
+ "cat",
+ "ServerGroup", "ServiceName", "ApplicationName", "Description"]
+}
\ No newline at end of file
diff --git a/metron-platform/metron-parsing/metron-parsers/src/test/resources/patterns/cisco_patterns b/metron-platform/metron-parsing/metron-parsers/src/test/resources/patterns/cisco_patterns
new file mode 100644
index 0000000000..bebab22a80
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsers/src/test/resources/patterns/cisco_patterns
@@ -0,0 +1,6 @@
+CISCO_ACTION Built|Teardown|Deny|Denied|denied|requested|permitted|denied by ACL|discarded|est-allowed|Dropping|created|deleted
+CISCO_REASON Duplicate TCP SYN|Failed to locate egress interface|Invalid transport field|No matching connection|DNS Response|DNS Query|(?:%{WORD}\s*)*
+CISCO_DIRECTION Inbound|inbound|Outbound|outbound
+CISCOFW302020_302021 %{CISCO_ACTION:action}(?: %{CISCO_DIRECTION:direction})? %{WORD:protocol} connection for faddr %{IP:ip_dst_addr}/%{INT:icmp_seq_num}(?:\(%{DATA:fwuser}\))? gaddr %{IP:ip_src_xlated}/%{INT:icmp_code_xlated} laddr %{IP:ip_src_addr}/%{INT:icmp_code}( \(%{DATA:user}\))?
+ACCESSED %{URIHOST:ip_src_addr} Accessed URL %{IP:ip_dst_addr}:%{URIPATHPARAM:uri_path}
+CISCO_PIX %{GREEDYDATA:timestamp}: %PIX-%{NOTSPACE:pix_type}: %{GREEDYDATA:data}
diff --git a/metron-platform/metron-parsing/metron-parsing-storm/README.md b/metron-platform/metron-parsing/metron-parsing-storm/README.md
new file mode 100644
index 0000000000..69a09f4b85
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsing-storm/README.md
@@ -0,0 +1,148 @@
+<!--
+Licensed to the Apache Software Foundation (ASF) under one
+or more contributor license agreements. See the NOTICE file
+distributed with this work for additional information
+regarding copyright ownership. The ASF licenses this file
+to you under the Apache License, Version 2.0 (the
+"License"); you may not use this file except in compliance
+with the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+-->
+# Parsers
+
+## Introduction
+Metron's parsers can be run in Storm topologies, complete with their own set of configuration options (e.g. parallelism). A script is provided to deploy a parser as a Storm topologoy.
+
+## Parser Configuration
+
+* `spoutParallelism` : The kafka spout parallelism (default to `1`). This can be overridden on the command line, and if there are multiple sensors should be in a comma separated list in the same order as the sensors.
+* `spoutNumTasks` : The number of tasks for the spout (default to `1`). This can be overridden on the command line, and if there are multiple sensors should be in a comma separated list in the same order as the sensors.
+* `parserParallelism` : The parser bolt parallelism (default to `1`). If there are multiple sensors, the last one's configuration will be used. This can be overridden on the command line.
+* `parserNumTasks` : The number of tasks for the parser bolt (default to `1`). If there are multiple sensors, the last one's configuration will be used. This can be overridden on the command line.
+* `errorWriterParallelism` : The error writer bolt parallelism (default to `1`). This can be overridden on the command line.
+* `errorWriterNumTasks` : The number of tasks for the error writer bolt (default to `1`). This can be overridden on the command line.
+* `numWorkers` : The number of workers to use in the topology (default is the storm default of `1`).
+* `numAckers` : The number of acker executors to use in the topology (default is the storm default of `1`).
+* `spoutConfig` : A map representing a custom spout config (this is a map). If there are multiple sensors, the configs will be merged with the last specified taking precedence. This can be overridden on the command line.
+* `stormConfig` : The storm config to use (this is a map). This can be overridden on the command line. If both are specified, they are merged with CLI properties taking precedence.
+
+# Starting the Parser Topology
+
+Starting a particular parser topology on a running Metron deployment is
+as easy as running the `start_parser_topology.sh` script located in
+`$METRON_HOME/bin`. This utility will allow you to configure and start
+the running topology assuming that the sensor specific parser configuration
+exists within zookeeper.
+
+The usage for `start_parser_topology.sh` is as follows:
+
+```
+usage: start_parser_topology.sh
+ -e,--extra_topology_options <JSON_FILE> Extra options in the form
+ of a JSON file with a map
+ for content.
+ -esc,--extra_kafka_spout_config <JSON_FILE> Extra spout config options
+ in the form of a JSON file
+ with a map for content.
+ Possible keys are:
+ retryDelayMaxMs,retryDelay
+ Multiplier,retryInitialDel
+ ayMs,stateUpdateIntervalMs
+ ,bufferSizeBytes,fetchMaxW
+ ait,fetchSizeBytes,maxOffs
+ etBehind,metricsTimeBucket
+ SizeInSecs,socketTimeoutMs
+ -ewnt,--error_writer_num_tasks <NUM_TASKS> Error Writer Num Tasks
+ -ewp,--error_writer_p <PARALLELISM_HINT> Error Writer Parallelism
+ Hint
+ -h,--help This screen
+ -iwnt,--invalid_writer_num_tasks <NUM_TASKS> Invalid Writer Num Tasks
+ -iwp,--invalid_writer_p <PARALLELISM_HINT> Invalid Message Writer Parallelism Hint
+ -k,--kafka <BROKER_URL> Kafka Broker URL
+ -ksp,--kafka_security_protocol <SECURITY_PROTOCOL> Kafka Security Protocol
+ -mt,--message_timeout <TIMEOUT_IN_SECS> Message Timeout in Seconds
+ -mtp,--max_task_parallelism <MAX_TASK> Max task parallelism
+ -na,--num_ackers <NUM_ACKERS> Number of Ackers
+ -nw,--num_workers <NUM_WORKERS> Number of Workers
+ -ot,--output_topic <KAFKA_TOPIC> Output Kafka Topic
+ -pnt,--parser_num_tasks <NUM_TASKS> Parser Num Tasks
+ -pp,--parser_p <PARALLELISM_HINT> Parser Parallelism Hint
+ -s,--sensor <SENSOR_TYPE> Sensor Type
+ -snt,--spout_num_tasks <NUM_TASKS> Spout Num Tasks
+ -sp,--spout_p <SPOUT_PARALLELISM_HINT> Spout Parallelism Hint
+ -t,--test <TEST> Run in Test Mode
+ -z,--zk <ZK_QUORUM> Zookeeper Quroum URL
+ (zk1:2181,zk2:2181,...
+```
+
+## The `--extra_kafka_spout_config` Option
+These options are intended to configure the Storm Kafka Spout more completely. These options can be
+specified in a JSON file containing a map associating the kafka spout configuration parameter to a value.
+The range of values possible to configure are:
+* `spout.pollTimeoutMs` - Specifies the time, in milliseconds, spent waiting in poll if data is not available. Default is 2s
+* `spout.firstPollOffsetStrategy` - Sets the offset used by the Kafka spout in the first poll to Kafka broker upon process start. One of
+ * `EARLIEST`
+ * `LATEST`
+ * `UNCOMMITTED_EARLIEST` - Last uncommitted and if offsets aren't found, defaults to earliest. NOTE: This is the default.
+ * `UNCOMMITTED_LATEST` - Last uncommitted and if offsets aren't found, defaults to latest.
+* `spout.offsetCommitPeriodMs` - Specifies the period, in milliseconds, the offset commit task is periodically called. Default is 15s.
+* `spout.maxUncommittedOffsets` - Defines the max number of polled offsets (records) that can be pending commit, before another poll can take place. Once this limit is reached, no more offsets (records) can be polled until the next successful commit(s) sets the number of pending offsets bellow the threshold. The default is 10,000,000.
+* `spout.maxRetries` - Defines the max number of retrials in case of tuple failure. The default is to retry forever, which means that no new records are committed until the previous polled records have been acked. This guarantees at once delivery of all the previously polled records. By specifying a finite value for maxRetries, the user decides to sacrifice guarantee of delivery for the previous polled records in favor of processing more records.
+* Any of the configs in the Consumer API for [Kafka 0.10.x](http://kafka.apache.org/0100/documentation.html#newconsumerconfigs)
+
+For instance, creating a JSON file which will set the offsets to `UNCOMMITTED_EARLIEST`
+```
+{
+ "spout.firstPollOffsetStrategy" : "UNCOMMITTED_EARLIEST"
+}
+```
+
+This would be loaded by passing the file as argument to `--extra_kafka_spout_config`
+
+## The `--extra_topology_options` Option
+
+These options are intended to be Storm configuration options and will live in
+a JSON file which will be loaded into the Storm config. For instance, if you wanted to set a storm property on
+the config called `topology.ticks.tuple.freq.secs` to 1000 and `storm.local.dir` to `/opt/my/path`
+you could create a file called `custom_config.json` containing
+```
+{
+ "topology.ticks.tuple.freq.secs" : 1000,
+ "storm.local.dir" : "/opt/my/path"
+}
+```
+and pass `--extra_topology_options custom_config.json` to `start_parser_topology.sh`.
+
+## Parser Topology
+The enrichment topology as started by the `$METRON_HOME/bin/start_parser_topology.sh`
+script uses a default of one executor per bolt. In a real production system, this should
+be customized by modifying the arguments sent to this utility.
+* Topology Wide
+ * `--num_workers` : The number of workers for the topology
+ * `--num_ackers` : The number of ackers for the topology
+* The Kafka Spout
+ * `--spout_num_tasks` : The number of tasks for the spout
+ * `--spout_p` : The parallelism hint for the spout
+ * Ensure that the spout has enough parallelism so that it can dedicate a worker per partition in your kafka topic.
+* The Parser Bolt
+ * `--parser_num_tasks` : The number of tasks for the parser bolt
+ * `--parser_p` : The parallelism hint for the spout
+ * This is bolt that gets the most processing, so ensure that it is configured with sufficient parallelism to match your throughput expectations.
+* The Error Message Writer Bolt
+ * `--error_writer_num_tasks` : The number of tasks for the error writer bolt
+ * `--error_writer_p` : The parallelism hint for the error writer bolt
+
+Finally, if workers and executors are new to you, the following might be of use to you:
+* [Understanding the Parallelism of a Storm Topology](http://www.michael-noll.com/blog/2012/10/16/understanding-the-parallelism-of-a-storm-topology/)
+
+## Parser Aggregation
+For performance reasons, multiple sensors can be aggregated into a single Storm topology. When this is done, there will be multiple Kafka spouts, but only a single parser bolt which will handle delegating to the correct parser as needed. There are some constraints around this, in particular regarding some configuration. Additionally, all sensors must flow to the same error topic. The Kafka topic is retrieved from the input Tuple itself.
+
+A worked example of this can be found in the [Parser Chaining use case](../../../use-cases/parser_chaining/README.md#aggregated-parsers-with-parser-chaining).
diff --git a/metron-platform/metron-parsing/metron-parsing-storm/pom.xml b/metron-platform/metron-parsing/metron-parsing-storm/pom.xml
new file mode 100644
index 0000000000..50228b3af3
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsing-storm/pom.xml
@@ -0,0 +1,264 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+ Licensed to the Apache Software
+ Foundation (ASF) under one or more contributor license agreements. See the
+ NOTICE file distributed with this work for additional information regarding
+ copyright ownership. The ASF licenses this file to You under the Apache License,
+ Version 2.0 (the "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing, software distributed
+ under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
+ OR CONDITIONS OF ANY KIND, either express or implied. See the License for
+ the specific language governing permissions and limitations under the License.
+ -->
+
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+ <modelVersion>4.0.0</modelVersion>
+ <parent>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-parsing</artifactId>
+ <version>0.7.0</version>
+ </parent>
+ <artifactId>metron-parsing-storm</artifactId>
+ <name>metron-parsing-storm</name>
+ <description>Metron code for running parsers on Apache Storm</description>
+ <url>https://metron.apache.org/</url>
+ <properties>
+ <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+ <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
+ </properties>
+ <dependencies>
+ <!-- Metron dependencies -->
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-common</artifactId>
+ <version>${project.parent.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-parsers-common</artifactId>
+ <version>${project.parent.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-parsers</artifactId>
+ <version>${project.parent.version}</version>
+ </dependency>
+
+ <!-- Storm dependencies -->
+ <dependency>
+ <groupId>org.apache.storm</groupId>
+ <artifactId>storm-rename-hack</artifactId>
+ <version>${global_storm_version}</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.storm</groupId>
+ <artifactId>storm-core</artifactId>
+ <version>${global_storm_version}</version>
+ <scope>provided</scope>
+ <exclusions>
+ <exclusion>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-api</artifactId>
+ </exclusion>
+ <exclusion>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-core</artifactId>
+ </exclusion>
+ <exclusion>
+ <artifactId>servlet-api</artifactId>
+ <groupId>javax.servlet</groupId>
+ </exclusion>
+ <exclusion>
+ <artifactId>log4j-over-slf4j</artifactId>
+ <groupId>org.slf4j</groupId>
+ </exclusion>
+ <exclusion>
+ <artifactId>log4j-slf4j-impl</artifactId>
+ <groupId>org.apache.logging.log4j</groupId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+
+ <!-- Test Dependencies -->
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-parsers-common</artifactId>
+ <version>${project.parent.version}</version>
+ <scope>test</scope>
+ <type>test-jar</type>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-integration-test</artifactId>
+ <version>${project.parent.version}</version>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-enrichment</artifactId>
+ <version>${project.parent.version}</version>
+ <scope>test</scope>
+ <type>test-jar</type>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.metron</groupId>
+ <artifactId>metron-hbase</artifactId>
+ <version>${project.parent.version}</version>
+ <scope>test</scope>
+ <type>test-jar</type>
+ </dependency>
+
+ <dependency>
+ <groupId>org.apache.kafka</groupId>
+ <artifactId>kafka-clients</artifactId>
+ <version>${global_kafka_version}</version>
+ <classifier>test</classifier>
+ <scope>test</scope>
+ <exclusions>
+ <exclusion>
+ <groupId>log4j</groupId>
+ <artifactId>log4j</artifactId>
+ </exclusion>
+ </exclusions>
+ </dependency>
+
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-api</artifactId>
+ <version>${global_log4j_core_version}</version>
+ <scope>test</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-core</artifactId>
+ <version>${global_log4j_core_version}</version>
+ <scope>test</scope>
+ </dependency>
+
+ </dependencies>
+ <build>
+ <plugins>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-jar-plugin</artifactId>
+ <version>${global_jar_version}</version>
+ <executions>
+ <execution>
+ <goals>
+ <goal>test-jar</goal>
+ </goals>
+ </execution>
+ </executions>
+ </plugin>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-shade-plugin</artifactId>
+ <version>${global_shade_version}</version>
+ <configuration>
+ <createDependencyReducedPom>true</createDependencyReducedPom>
+ <artifactSet>
+ <excludes>
+ <exclude>*slf4j*</exclude>
+ </excludes>
+ </artifactSet>
+ </configuration>
+ <executions>
+ <execution>
+ <phase>package</phase>
+ <goals>
+ <goal>shade</goal>
+ </goals>
+ <configuration>
+ <shadedArtifactAttached>true</shadedArtifactAttached>
+ <shadedClassifierName>uber</shadedClassifierName>
+ <filters>
+ <filter>
+ <artifact>*:*</artifact>
+ <excludes>
+ <exclude>META-INF/*.SF</exclude>
+ <exclude>META-INF/*.DSA</exclude>
+ <exclude>META-INF/*.RSA</exclude>
+ </excludes>
+ </filter>
+ </filters>
+ <relocations>
+ <relocation>
+ <pattern>com.fasterxml.jackson</pattern>
+ <shadedPattern>org.apache.metron.jackson</shadedPattern>
+ </relocation>
+ </relocations>
+ <artifactSet>
+ <excludes>
+ <exclude>storm:storm-core:*</exclude>
+ <exclude>storm:storm-lib:*</exclude>
+ <exclude>org.slf4j.impl*</exclude>
+ <exclude>org.slf4j:slf4j-log4j*</exclude>
+ </excludes>
+ </artifactSet>
+ <transformers>
+ <transformer implementation="org.atteo.classindex.ClassIndexTransformer"/>
+ <transformer
+ implementation="org.apache.maven.plugins.shade.resource.DontIncludeResourceTransformer">
+ <resources>
+ <resource>.yaml</resource>
+ <resource>LICENSE.txt</resource>
+ <resource>ASL2.0</resource>
+ <resource>NOTICE.txt</resource>
+ </resources>
+ </transformer>
+ <!-- UNCOMMENT THIS IF YOU NEED TO REGENERATE THE BEST GUESS NOTICES FILE WHICH REQUIRES PRUNING EVERY RELEASE -->
+ <!--transformer implementation="org.apache.maven.plugins.shade.resource.ApacheNoticeResourceTransformer">
+ <addHeader>false</addHeader>
+ <projectName>${project.name}</projectName>
+ </transformer-->
+ <transformer
+ implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer"/>
+ <transformer
+ implementation="org.apache.maven.plugins.shade.resource.ManifestResourceTransformer">
+ <mainClass></mainClass>
+ </transformer>
+ </transformers>
+ </configuration>
+ </execution>
+ </executions>
+ <dependencies>
+ <dependency>
+ <groupId>org.atteo.classindex</groupId>
+ <artifactId>classindex-transformer</artifactId>
+ <version>${global_classindex_version}</version>
+ </dependency>
+ </dependencies>
+ </plugin>
+ <plugin>
+ <artifactId>maven-assembly-plugin</artifactId>
+ <configuration>
+ <descriptor>src/main/assembly/assembly.xml</descriptor>
+ </configuration>
+ <executions>
+ <execution>
+ <id>make-assembly</id> <!-- this is used for inheritance merges -->
+ <phase>package</phase> <!-- bind to the packaging phase -->
+ <goals>
+ <goal>single</goal>
+ </goals>
+ </execution>
+ </executions>
+ </plugin>
+ </plugins>
+ <resources>
+ <resource>
+ <directory>src/main/resources</directory>
+ </resource>
+ <resource>
+ <directory>src/main/patterns</directory>
+ </resource>
+ <resource>
+ <directory>src/test/resources</directory>
+ </resource>
+ </resources>
+ </build>
+</project>
diff --git a/metron-platform/metron-parsing/metron-parsing-storm/src/main/assembly/assembly.xml b/metron-platform/metron-parsing/metron-parsing-storm/src/main/assembly/assembly.xml
new file mode 100644
index 0000000000..bad1f00fff
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/main/assembly/assembly.xml
@@ -0,0 +1,65 @@
+<!--
+ Licensed to the Apache Software
+ Foundation (ASF) under one or more contributor license agreements. See the
+ NOTICE file distributed with this work for additional information regarding
+ copyright ownership. The ASF licenses this file to You under the Apache License,
+ Version 2.0 (the "License"); you may not use this file except in compliance
+ with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
+ Unless required by applicable law or agreed to in writing, software distributed
+ under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
+ OR CONDITIONS OF ANY KIND, either express or implied. See the License for
+ the specific language governing permissions and limitations under the License.
+ -->
+
+<assembly>
+ <id>archive</id>
+ <formats>
+ <format>tar.gz</format>
+ </formats>
+ <includeBaseDirectory>false</includeBaseDirectory>
+ <fileSets>
+ <fileSet>
+ <directory>${project.basedir}/src/main/config</directory>
+ <outputDirectory>config</outputDirectory>
+ <useDefaultExcludes>true</useDefaultExcludes>
+ <excludes>
+ <exclude>**/*.formatted</exclude>
+ <exclude>**/*.filtered</exclude>
+ </excludes>
+ <fileMode>0644</fileMode>
+ <lineEnding>unix</lineEnding>
+ <filtered>true</filtered>
+ </fileSet>
+ <fileSet>
+ <directory>${project.basedir}/src/main/resources/patterns</directory>
+ <outputDirectory>patterns</outputDirectory>
+ <useDefaultExcludes>true</useDefaultExcludes>
+ <excludes>
+ <exclude>**/*.formatted</exclude>
+ <exclude>**/*.filtered</exclude>
+ </excludes>
+ <fileMode>0644</fileMode>
+ <lineEnding>unix</lineEnding>
+ </fileSet>
+ <fileSet>
+ <directory>${project.basedir}/src/main/scripts</directory>
+ <outputDirectory>bin</outputDirectory>
+ <useDefaultExcludes>true</useDefaultExcludes>
+ <excludes>
+ <exclude>**/*.formatted</exclude>
+ <exclude>**/*.filtered</exclude>
+ </excludes>
+ <fileMode>0755</fileMode>
+ <lineEnding>unix</lineEnding>
+ <filtered>true</filtered>
+ </fileSet>
+ <fileSet>
+ <directory>${project.basedir}/target</directory>
+ <includes>
+ <include>${project.artifactId}-${project.version}-uber.jar</include>
+ </includes>
+ <outputDirectory>lib</outputDirectory>
+ <useDefaultExcludes>true</useDefaultExcludes>
+ </fileSet>
+ </fileSets>
+</assembly>
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bolt/ParserBolt.java b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/bolt/ParserBolt.java
similarity index 99%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bolt/ParserBolt.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/bolt/ParserBolt.java
index a9ee305d1a..d5f8d1e4ba 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bolt/ParserBolt.java
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/bolt/ParserBolt.java
@@ -18,6 +18,7 @@
package org.apache.metron.parsers.bolt;
+import com.github.benmanes.caffeine.cache.Cache;
import java.io.Serializable;
import java.lang.invoke.MethodHandles;
import java.util.Collections;
@@ -25,8 +26,6 @@
import java.util.Map;
import java.util.Map.Entry;
import java.util.function.Function;
-
-import com.github.benmanes.caffeine.cache.Cache;
import org.apache.metron.common.Constants;
import org.apache.metron.common.bolt.ConfiguredParserBolt;
import org.apache.metron.common.configuration.ParserConfigurations;
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bolt/WriterBolt.java b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/bolt/WriterBolt.java
similarity index 99%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bolt/WriterBolt.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/bolt/WriterBolt.java
index fdfcedae18..abf3e4666a 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bolt/WriterBolt.java
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/bolt/WriterBolt.java
@@ -19,6 +19,7 @@
package org.apache.metron.parsers.bolt;
import java.util.Collections;
+import java.util.Map;
import org.apache.metron.common.Constants;
import org.apache.metron.common.configuration.ParserConfigurations;
import org.apache.metron.common.error.MetronError;
@@ -32,8 +33,6 @@
import org.apache.storm.tuple.Tuple;
import org.json.simple.JSONObject;
-import java.util.Map;
-
public class WriterBolt extends BaseRichBolt {
private WriterHandler handler;
private ParserConfigurations configuration;
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bolt/WriterHandler.java b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/bolt/WriterHandler.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/bolt/WriterHandler.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/bolt/WriterHandler.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/MergeAndShadeTransformer.java b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/MergeAndShadeTransformer.java
similarity index 94%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/MergeAndShadeTransformer.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/MergeAndShadeTransformer.java
index eaadf71981..eb7e2da971 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/MergeAndShadeTransformer.java
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/MergeAndShadeTransformer.java
@@ -18,18 +18,24 @@
package org.apache.metron.parsers.topology;
import com.google.common.base.Splitter;
-import org.apache.storm.daemon.JarTransformer;
-import org.apache.storm.hack.StormShadeTransformer;
-import org.slf4j.Logger;
-import org.slf4j.LoggerFactory;
-
-import java.io.*;
+import java.io.BufferedInputStream;
+import java.io.BufferedOutputStream;
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.FileOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.OutputStream;
import java.lang.invoke.MethodHandles;
import java.util.HashSet;
import java.util.Set;
import java.util.jar.JarEntry;
import java.util.jar.JarInputStream;
import java.util.jar.JarOutputStream;
+import org.apache.storm.daemon.JarTransformer;
+import org.apache.storm.hack.StormShadeTransformer;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
/**
* This is a storm jar transformer that will add in additional jars pulled from an
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/ParserTopologyBuilder.java b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/ParserTopologyBuilder.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/ParserTopologyBuilder.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/ParserTopologyBuilder.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/ParserTopologyCLI.java b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/ParserTopologyCLI.java
similarity index 99%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/ParserTopologyCLI.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/ParserTopologyCLI.java
index eb39f89d30..d1422795f2 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/ParserTopologyCLI.java
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/ParserTopologyCLI.java
@@ -351,7 +351,8 @@ protected void processOption(String arg, ListIterator iter) throws ParseExceptio
if(ParserOptions.SPOUT_PARALLELISM.has(cmd)) {
// Handle the case where there's only one and we can default reasonably
if( parserConfigs.size() == 1) {
- return Collections.singletonList(Integer.parseInt(ParserOptions.SPOUT_PARALLELISM.get(cmd, "1")));
+ return Collections.singletonList(Integer.parseInt(
+ ParserOptions.SPOUT_PARALLELISM.get(cmd, "1")));
}
// Handle the multiple explicitly passed spout parallelism's case.
@@ -380,7 +381,8 @@ protected void processOption(String arg, ListIterator iter) throws ParseExceptio
if(ParserOptions.SPOUT_NUM_TASKS.has(cmd)) {
// Handle the case where there's only one and we can default reasonably
if( parserConfigs.size() == 1) {
- return Collections.singletonList(Integer.parseInt(ParserOptions.SPOUT_NUM_TASKS.get(cmd, "1")));
+ return Collections.singletonList(Integer.parseInt(
+ ParserOptions.SPOUT_NUM_TASKS.get(cmd, "1")));
}
// Handle the multiple explicitly passed spout parallelism's case.
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/config/Arg.java b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/config/Arg.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/config/Arg.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/config/Arg.java
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/config/ConfigHandlers.java b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/config/ConfigHandlers.java
similarity index 99%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/config/ConfigHandlers.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/config/ConfigHandlers.java
index 8d98922888..ccb07bfc88 100644
--- a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/config/ConfigHandlers.java
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/config/ConfigHandlers.java
@@ -18,14 +18,12 @@
package org.apache.metron.parsers.topology.config;
-import org.apache.storm.Config;
-import org.apache.commons.io.FileUtils;
-import org.apache.metron.common.utils.JSONUtils;
-
import java.io.File;
import java.io.IOException;
-import java.util.Map;
import java.util.function.Function;
+import org.apache.commons.io.FileUtils;
+import org.apache.metron.common.utils.JSONUtils;
+import org.apache.storm.Config;
public class ConfigHandlers {
public static class SetNumWorkersHandler implements Function<Arg, Config> {
diff --git a/metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/config/ValueSupplier.java b/metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/config/ValueSupplier.java
similarity index 100%
rename from metron-platform/metron-parsers/src/main/java/org/apache/metron/parsers/topology/config/ValueSupplier.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/main/java/org/apache/metron/parsers/topology/config/ValueSupplier.java
diff --git a/metron-platform/metron-parsing/metron-parsing-storm/src/main/resources/META-INF/LICENSE b/metron-platform/metron-parsing/metron-parsing-storm/src/main/resources/META-INF/LICENSE
new file mode 100644
index 0000000000..849fa54dc4
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/main/resources/META-INF/LICENSE
@@ -0,0 +1,602 @@
+Apache License
+ Version 2.0, January 2004
+ http://www.apache.org/licenses/
+
+ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+ 1. Definitions.
+
+ "License" shall mean the terms and conditions for use, reproduction,
+ and distribution as defined by Sections 1 through 9 of this document.
+
+ "Licensor" shall mean the copyright owner or entity authorized by
+ the copyright owner that is granting the License.
+
+ "Legal Entity" shall mean the union of the acting entity and all
+ other entities that control, are controlled by, or are under common
+ control with that entity. For the purposes of this definition,
+ "control" means (i) the power, direct or indirect, to cause the
+ direction or management of such entity, whether by contract or
+ otherwise, or (ii) ownership of fifty percent (50%) or more of the
+ outstanding shares, or (iii) beneficial ownership of such entity.
+
+ "You" (or "Your") shall mean an individual or Legal Entity
+ exercising permissions granted by this License.
+
+ "Source" form shall mean the preferred form for making modifications,
+ including but not limited to software source code, documentation
+ source, and configuration files.
+
+ "Object" form shall mean any form resulting from mechanical
+ transformation or translation of a Source form, including but
+ not limited to compiled object code, generated documentation,
+ and conversions to other media types.
+
+ "Work" shall mean the work of authorship, whether in Source or
+ Object form, made available under the License, as indicated by a
+ copyright notice that is included in or attached to the work
+ (an example is provided in the Appendix below).
+
+ "Derivative Works" shall mean any work, whether in Source or Object
+ form, that is based on (or derived from) the Work and for which the
+ editorial revisions, annotations, elaborations, or other modifications
+ represent, as a whole, an original work of authorship. For the purposes
+ of this License, Derivative Works shall not include works that remain
+ separable from, or merely link (or bind by name) to the interfaces of,
+ the Work and Derivative Works thereof.
+
+ "Contribution" shall mean any work of authorship, including
+ the original version of the Work and any modifications or additions
+ to that Work or Derivative Works thereof, that is intentionally
+ submitted to Licensor for inclusion in the Work by the copyright owner
+ or by an individual or Legal Entity authorized to submit on behalf of
+ the copyright owner. For the purposes of this definition, "submitted"
+ means any form of electronic, verbal, or written communication sent
+ to the Licensor or its representatives, including but not limited to
+ communication on electronic mailing lists, source code control systems,
+ and issue tracking systems that are managed by, or on behalf of, the
+ Licensor for the purpose of discussing and improving the Work, but
+ excluding communication that is conspicuously marked or otherwise
+ designated in writing by the copyright owner as "Not a Contribution."
+
+ "Contributor" shall mean Licensor and any individual or Legal Entity
+ on behalf of whom a Contribution has been received by Licensor and
+ subsequently incorporated within the Work.
+
+ 2. Grant of Copyright License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ copyright license to reproduce, prepare Derivative Works of,
+ publicly display, publicly perform, sublicense, and distribute the
+ Work and such Derivative Works in Source or Object form.
+
+ 3. Grant of Patent License. Subject to the terms and conditions of
+ this License, each Contributor hereby grants to You a perpetual,
+ worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+ (except as stated in this section) patent license to make, have made,
+ use, offer to sell, sell, import, and otherwise transfer the Work,
+ where such license applies only to those patent claims licensable
+ by such Contributor that are necessarily infringed by their
+ Contribution(s) alone or by combination of their Contribution(s)
+ with the Work to which such Contribution(s) was submitted. If You
+ institute patent litigation against any entity (including a
+ cross-claim or counterclaim in a lawsuit) alleging that the Work
+ or a Contribution incorporated within the Work constitutes direct
+ or contributory patent infringement, then any patent licenses
+ granted to You under this License for that Work shall terminate
+ as of the date such litigation is filed.
+
+ 4. Redistribution. You may reproduce and distribute copies of the
+ Work or Derivative Works thereof in any medium, with or without
+ modifications, and in Source or Object form, provided that You
+ meet the following conditions:
+
+ (a) You must give any other recipients of the Work or
+ Derivative Works a copy of this License; and
+
+ (b) You must cause any modified files to carry prominent notices
+ stating that You changed the files; and
+
+ (c) You must retain, in the Source form of any Derivative Works
+ that You distribute, all copyright, patent, trademark, and
+ attribution notices from the Source form of the Work,
+ excluding those notices that do not pertain to any part of
+ the Derivative Works; and
+
+ (d) If the Work includes a "NOTICE" text file as part of its
+ distribution, then any Derivative Works that You distribute must
+ include a readable copy of the attribution notices contained
+ within such NOTICE file, excluding those notices that do not
+ pertain to any part of the Derivative Works, in at least one
+ of the following places: within a NOTICE text file distributed
+ as part of the Derivative Works; within the Source form or
+ documentation, if provided along with the Derivative Works; or,
+ within a display generated by the Derivative Works, if and
+ wherever such third-party notices normally appear. The contents
+ of the NOTICE file are for informational purposes only and
+ do not modify the License. You may add Your own attribution
+ notices within Derivative Works that You distribute, alongside
+ or as an addendum to the NOTICE text from the Work, provided
+ that such additional attribution notices cannot be construed
+ as modifying the License.
+
+ You may add Your own copyright statement to Your modifications and
+ may provide additional or different license terms and conditions
+ for use, reproduction, or distribution of Your modifications, or
+ for any such Derivative Works as a whole, provided Your use,
+ reproduction, and distribution of the Work otherwise complies with
+ the conditions stated in this License.
+
+ 5. Submission of Contributions. Unless You explicitly state otherwise,
+ any Contribution intentionally submitted for inclusion in the Work
+ by You to the Licensor shall be under the terms and conditions of
+ this License, without any additional terms or conditions.
+ Notwithstanding the above, nothing herein shall supersede or modify
+ the terms of any separate license agreement you may have executed
+ with Licensor regarding such Contributions.
+
+ 6. Trademarks. This License does not grant permission to use the trade
+ names, trademarks, service marks, or product names of the Licensor,
+ except as required for reasonable and customary use in describing the
+ origin of the Work and reproducing the content of the NOTICE file.
+
+ 7. Disclaimer of Warranty. Unless required by applicable law or
+ agreed to in writing, Licensor provides the Work (and each
+ Contributor provides its Contributions) on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+ implied, including, without limitation, any warranties or conditions
+ of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+ PARTICULAR PURPOSE. You are solely responsible for determining the
+ appropriateness of using or redistributing the Work and assume any
+ risks associated with Your exercise of permissions under this License.
+
+ 8. Limitation of Liability. In no event and under no legal theory,
+ whether in tort (including negligence), contract, or otherwise,
+ unless required by applicable law (such as deliberate and grossly
+ negligent acts) or agreed to in writing, shall any Contributor be
+ liable to You for damages, including any direct, indirect, special,
+ incidental, or consequential damages of any character arising as a
+ result of this License or out of the use or inability to use the
+ Work (including but not limited to damages for loss of goodwill,
+ work stoppage, computer failure or malfunction, or any and all
+ other commercial damages or losses), even if such Contributor
+ has been advised of the possibility of such damages.
+
+ 9. Accepting Warranty or Additional Liability. While redistributing
+ the Work or Derivative Works thereof, You may choose to offer,
+ and charge a fee for, acceptance of support, warranty, indemnity,
+ or other liability obligations and/or rights consistent with this
+ License. However, in accepting such obligations, You may act only
+ on Your own behalf and on Your sole responsibility, not on behalf
+ of any other Contributor, and only if You agree to indemnify,
+ defend, and hold each Contributor harmless for any liability
+ incurred by, or claims asserted against, such Contributor by reason
+ of your accepting any such warranty or additional liability.
+
+ END OF TERMS AND CONDITIONS
+
+ APPENDIX: How to apply the Apache License to your work.
+
+ To apply the Apache License to your work, attach the following
+ boilerplate notice, with the fields enclosed by brackets "{}"
+ replaced with your own identifying information. (Don't include
+ the brackets!) The text should be enclosed in the appropriate
+ comment syntax for the file format. We also recommend that a
+ file or class name and description of purpose be included on the
+ same "printed page" as the copyright notice for easier
+ identification within third-party archives.
+
+ Copyright {yyyy} {name of copyright owner}
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+------------------------------------------------------------------------------------
+------------------------------------------------------------------------------------
+ Public Domain
+------------------------------------------------------------------------------------
+
+This product contains the extensions to Java Collections Framework which has
+been derived from the works by JSR-166 EG, Doug Lea, and Jason T. Greene:
+
+ * LICENSE:
+ * license/LICENSE.jsr166y.txt (Public Domain)
+ * HOMEPAGE:
+ * http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/
+ * http://viewvc.jboss.org/cgi-bin/viewvc.cgi/jbosscache/experimental/jsr166/
+
+This product contains a modified version of Robert Harder's Public Domain
+Base64 Encoder and Decoder, which can be obtained at:
+
+ * LICENSE:
+ * license/LICENSE.base64.txt (Public Domain)
+ * HOMEPAGE:
+ * http://iharder.sourceforge.net/current/java/base64/
+
+
+------------------------------------------------------------------------------------
+ BSD
+------------------------------------------------------------------------------------
+
+This product bundles asm 3.1, which is available under a "BSD Software License" license. For details, see http://asm.ow2.org/
+This product bundles protobuf-java 2.5.0, which is available under a "BSD Software License" license. For details, see http://code.google.com/p/protobuf
+This product bundles jsch 0.1.42, which is available under a "BSD Software License" license. For details, see http://www.jcraft.com/jsch/
+This product bundles paranamer 2.3, which is available under a "BSD Software License" license. For details, see https://github.com/paul-hammant/paranamer
+This product bundles leveldbjni-all 1.8, which is available under a "BSD Software License" license. For details, see https://github.com/fusesource/leveldbjni
+This product bundles scala-library 2.10.6, which is available under a "BSD Software License" license. For details, see http://www.scala-lang.org/
+This product bundles xmlenc 0.52, which is available under a "BSD Software License" license. For details, see http://xmlenc.sourceforge.net
+
+This product contains a modified version of 'JZlib', a re-implementation of
+zlib in pure Java, which can be obtained at:
+
+ * LICENSE:
+ * license/LICENSE.jzlib.txt (BSD Style License)
+ * HOMEPAGE:
+ * http://www.jcraft.com/jzlib/
+
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+------------------------------------------------------------------------------------
+ CDDL v1.1
+------------------------------------------------------------------------------------
+
+This product bundles jersey-guice 1.9, which is available under a "Common Development and Distribution License v1.1" license. For details, see https://jersey.java.net/
+This product bundles jersey-client 1.9, which is available under a "Common Development and Distribution License v1.1" license. For details, see https://jersey.java.net/
+This product bundles jersey-core 1.9, which is available under a "Common Development and Distribution License v1.1" license. For details, see https://jersey.java.net/
+This product bundles jersey-json 1.9, which is available under a "Common Development and Distribution License v1.1" license. For details, see https://jersey.java.net/
+This product bundles jersey-server 1.9, which is available under a "Common Development and Distribution License v1.1" license. For details, see https://jersey.java.net/
+This product bundles jaxb-impl 2.2.3-1, which is available under a "Common Development and Distribution License" license. For details, see http://jaxb.java.net/
+This product bundles activation 1.1, which is available under a "Common Development and Distribution License v1.0" license. For details, see http://java.sun.com/products/javabeans/jaf/index.jsp
+This product bundles jaxb-api 2.2.2, which is available under a "Common Development and Distribution License" license. For details, see https://jaxb.dev.java.net/
+This product bundles stax-api 1.0-2, which is available under a "Common Development and Distribution License v1.0" license. For details, see https://docs.oracle.com/javase/7/docs/api/javax/xml/stream/package-summary.html
+
+COMMON DEVELOPMENT AND DISTRIBUTION LICENSE (CDDL) Version 1.0
+ 1. Definitions.
+ 1.1. "Contributor" means each individual or entity that
+ creates or contributes to the creation of Modifications.
+ 1.2. "Contributor Version" means the combination of the
+ Original Software, prior Modifications used by a
+ Contributor (if any), and the Modifications made by that
+ particular Contributor.
+ 1.3. "Covered Software" means (a) the Original Software, or
+ (b) Modifications, or (c) the combination of files
+ containing Original Software with files containing
+ Modifications, in each case including portions thereof.
+ 1.4. "Executable" means the Covered Software in any form
+ other than Source Code.
+ 1.5. "Initial Developer" means the individual or entity
+ that first makes Original Software available under this
+ License.
+ 1.6. "Larger Work" means a work which combines Covered
+ Software or portions thereof with code not governed by the
+ terms of this License.
+ 1.7. "License" means this document.
+ 1.8. "Licensable" means having the right to grant, to the
+ maximum extent possible, whether at the time of the initial
+ grant or subsequently acquired, any and all of the rights
+ conveyed herein.
+ 1.9. "Modifications" means the Source Code and Executable
+ form of any of the following:
+ A. Any file that results from an addition to,
+ deletion from or modification of the contents of a
+ file containing Original Software or previous
+ Modifications;
+ B. Any new file that contains any part of the
+ Original Software or previous Modification; or
+ C. Any new file that is contributed or otherwise made
+ available under the terms of this License.
+ 1.10. "Original Software" means the Source Code and
+ Executable form of computer software code that is
+ originally released under this License.
+ 1.11. "Patent Claims" means any patent claim(s), now owned
+ or hereafter acquired, including without limitation,
+ method, process, and apparatus claims, in any patent
+ Licensable by grantor.
+ 1.12. "Source Code" means (a) the common form of computer
+ software code in which modifications are made and (b)
+ associated documentation included in or with such code.
+ 1.13. "You" (or "Your") means an individual or a legal
+ entity exercising rights under, and complying with all of
+ the terms of, this License. For legal entities, "You"
+ includes any entity which controls, is controlled by, or is
+ under common control with You. For purposes of this
+ definition, "control" means (a) the power, direct or
+ indirect, to cause the direction or management of such
+ entity, whether by contract or otherwise, or (b) ownership
+ of more than fifty percent (50%) of the outstanding shares
+ or beneficial ownership of such entity.
+ 2. License Grants.
+ 2.1. The Initial Developer Grant.
+ Conditioned upon Your compliance with Section 3.1 below and
+ subject to third party intellectual property claims, the
+ Initial Developer hereby grants You a world-wide,
+ royalty-free, non-exclusive license:
+ (a) under intellectual property rights (other than
+ patent or trademark) Licensable by Initial Developer,
+ to use, reproduce, modify, display, perform,
+ sublicense and distribute the Original Software (or
+ portions thereof), with or without Modifications,
+ and/or as part of a Larger Work; and
+ (b) under Patent Claims infringed by the making,
+ using or selling of Original Software, to make, have
+ made, use, practice, sell, and offer for sale, and/or
+ otherwise dispose of the Original Software (or
+ portions thereof).
+ (c) The licenses granted in Sections 2.1(a) and (b)
+ are effective on the date Initial Developer first
+ distributes or otherwise makes the Original Software
+ available to a third party under the terms of this
+ License.
+ (d) Notwithstanding Section 2.1(b) above, no patent
+ license is granted: (1) for code that You delete from
+ the Original Software, or (2) for infringements
+ caused by: (i) the modification of the Original
+ Software, or (ii) the combination of the Original
+ Software with other software or devices.
+ 2.2. Contributor Grant.
+ Conditioned upon Your compliance with Section 3.1 below and
+ subject to third party intellectual property claims, each
+ Contributor hereby grants You a world-wide, royalty-free,
+ non-exclusive license:
+ (a) under intellectual property rights (other than
+ patent or trademark) Licensable by Contributor to
+ use, reproduce, modify, display, perform, sublicense
+ and distribute the Modifications created by such
+ Contributor (or portions thereof), either on an
+ unmodified basis, with other Modifications, as
+ Covered Software and/or as part of a Larger Work; and
+ (b) under Patent Claims infringed by the making,
+ using, or selling of Modifications made by that
+ Contributor either alone and/or in combination with
+ its Contributor Version (or portions of such
+ combination), to make, use, sell, offer for sale,
+ have made, and/or otherwise dispose of: (1)
+ Modifications made by that Contributor (or portions
+ thereof); and (2) the combination of Modifications
+ made by that Contributor with its Contributor Version
+ (or portions of such combination).
+ (c) The licenses granted in Sections 2.2(a) and
+ 2.2(b) are effective on the date Contributor first
+ distributes or otherwise makes the Modifications
+ available to a third party.
+ (d) Notwithstanding Section 2.2(b) above, no patent
+ license is granted: (1) for any code that Contributor
+ has deleted from the Contributor Version; (2) for
+ infringements caused by: (i) third party
+ modifications of Contributor Version, or (ii) the
+ combination of Modifications made by that Contributor
+ with other software (except as part of the
+ Contributor Version) or other devices; or (3) under
+ Patent Claims infringed by Covered Software in the
+ absence of Modifications made by that Contributor.
+ 3. Distribution Obligations.
+ 3.1. Availability of Source Code.
+ Any Covered Software that You distribute or otherwise make
+ available in Executable form must also be made available in
+ Source Code form and that Source Code form must be
+ distributed only under the terms of this License. You must
+ include a copy of this License with every copy of the
+ Source Code form of the Covered Software You distribute or
+ otherwise make available. You must inform recipients of any
+ such Covered Software in Executable form as to how they can
+ obtain such Covered Software in Source Code form in a
+ reasonable manner on or through a medium customarily used
+ for software exchange.
+ 3.2. Modifications.
+ The Modifications that You create or to which You
+ contribute are governed by the terms of this License. You
+ represent that You believe Your Modifications are Your
+ original creation(s) and/or You have sufficient rights to
+ grant the rights conveyed by this License.
+ 3.3. Required Notices.
+ You must include a notice in each of Your Modifications
+ that identifies You as the Contributor of the Modification.
+ You may not remove or alter any copyright, patent or
+ trademark notices contained within the Covered Software, or
+ any notices of licensing or any descriptive text giving
+ attribution to any Contributor or the Initial Developer.
+ 3.4. Application of Additional Terms.
+ You may not offer or impose any terms on any Covered
+ Software in Source Code form that alters or restricts the
+ applicable version of this License or the recipients'
+ rights hereunder. You may choose to offer, and to charge a
+ fee for, warranty, support, indemnity or liability
+ obligations to one or more recipients of Covered Software.
+ However, you may do so only on Your own behalf, and not on
+ behalf of the Initial Developer or any Contributor. You
+ must make it absolutely clear that any such warranty,
+ support, indemnity or liability obligation is offered by
+ You alone, and You hereby agree to indemnify the Initial
+ Developer and every Contributor for any liability incurred
+ by the Initial Developer or such Contributor as a result of
+ warranty, support, indemnity or liability terms You offer.
+ 3.5. Distribution of Executable Versions.
+ You may distribute the Executable form of the Covered
+ Software under the terms of this License or under the terms
+ of a license of Your choice, which may contain terms
+ different from this License, provided that You are in
+ compliance with the terms of this License and that the
+ license for the Executable form does not attempt to limit
+ or alter the recipient's rights in the Source Code form
+ from the rights set forth in this License. If You
+ distribute the Covered Software in Executable form under a
+ different license, You must make it absolutely clear that
+ any terms which differ from this License are offered by You
+ alone, not by the Initial Developer or Contributor. You
+ hereby agree to indemnify the Initial Developer and every
+ Contributor for any liability incurred by the Initial
+ Developer or such Contributor as a result of any such terms
+ You offer.
+ 3.6. Larger Works.
+ You may create a Larger Work by combining Covered Software
+ with other code not governed by the terms of this License
+ and distribute the Larger Work as a single product. In such
+ a case, You must make sure the requirements of this License
+ are fulfilled for the Covered Software.
+ 4. Versions of the License.
+ 4.1. New Versions.
+ Sun Microsystems, Inc. is the initial license steward and
+ may publish revised and/or new versions of this License
+ from time to time. Each version will be given a
+ distinguishing version number. Except as provided in
+ Section 4.3, no one other than the license steward has the
+ right to modify this License.
+ 4.2. Effect of New Versions.
+ You may always continue to use, distribute or otherwise
+ make the Covered Software available under the terms of the
+ version of the License under which You originally received
+ the Covered Software. If the Initial Developer includes a
+ notice in the Original Software prohibiting it from being
+ distributed or otherwise made available under any
+ subsequent version of the License, You must distribute and
+ make the Covered Software available under the terms of the
+ version of the License under which You originally received
+ the Covered Software. Otherwise, You may also choose to
+ use, distribute or otherwise make the Covered Software
+ available under the terms of any subsequent version of the
+ License published by the license steward.
+ 4.3. Modified Versions.
+ When You are an Initial Developer and You want to create a
+ new license for Your Original Software, You may create and
+ use a modified version of this License if You: (a) rename
+ the license and remove any references to the name of the
+ license steward (except to note that the license differs
+ from this License); and (b) otherwise make it clear that
+ the license contains terms which differ from this License.
+ 5. DISCLAIMER OF WARRANTY.
+ COVERED SOFTWARE IS PROVIDED UNDER THIS LICENSE ON AN "AS IS"
+ BASIS, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+ INCLUDING, WITHOUT LIMITATION, WARRANTIES THAT THE COVERED
+ SOFTWARE IS FREE OF DEFECTS, MERCHANTABLE, FIT FOR A PARTICULAR
+ PURPOSE OR NON-INFRINGING. THE ENTIRE RISK AS TO THE QUALITY AND
+ PERFORMANCE OF THE COVERED SOFTWARE IS WITH YOU. SHOULD ANY
+ COVERED SOFTWARE PROVE DEFECTIVE IN ANY RESPECT, YOU (NOT THE
+ INITIAL DEVELOPER OR ANY OTHER CONTRIBUTOR) ASSUME THE COST OF
+ ANY NECESSARY SERVICING, REPAIR OR CORRECTION. THIS DISCLAIMER OF
+ WARRANTY CONSTITUTES AN ESSENTIAL PART OF THIS LICENSE. NO USE OF
+ ANY COVERED SOFTWARE IS AUTHORIZED HEREUNDER EXCEPT UNDER THIS
+ DISCLAIMER.
+ 6. TERMINATION.
+ 6.1. This License and the rights granted hereunder will
+ terminate automatically if You fail to comply with terms
+ herein and fail to cure such breach within 30 days of
+ becoming aware of the breach. Provisions which, by their
+ nature, must remain in effect beyond the termination of
+ this License shall survive.
+ 6.2. If You assert a patent infringement claim (excluding
+ declaratory judgment actions) against Initial Developer or
+ a Contributor (the Initial Developer or Contributor against
+ whom You assert such claim is referred to as "Participant")
+ alleging that the Participant Software (meaning the
+ Contributor Version where the Participant is a Contributor
+ or the Original Software where the Participant is the
+ Initial Developer) directly or indirectly infringes any
+ patent, then any and all rights granted directly or
+ indirectly to You by such Participant, the Initial
+ Developer (if the Initial Developer is not the Participant)
+ and all Contributors under Sections 2.1 and/or 2.2 of this
+ License shall, upon 60 days notice from Participant
+ terminate prospectively and automatically at the expiration
+ of such 60 day notice period, unless if within such 60 day
+ period You withdraw Your claim with respect to the
+ Participant Software against such Participant either
+ unilaterally or pursuant to a written agreement with
+ Participant.
+ 6.3. In the event of termination under Sections 6.1 or 6.2
+ above, all end user licenses that have been validly granted
+ by You or any distributor hereunder prior to termination
+ (excluding licenses granted to You by any distributor)
+ shall survive termination.
+ 7. LIMITATION OF LIABILITY.
+ UNDER NO CIRCUMSTANCES AND UNDER NO LEGAL THEORY, WHETHER TORT
+ (INCLUDING NEGLIGENCE), CONTRACT, OR OTHERWISE, SHALL YOU, THE
+ INITIAL DEVELOPER, ANY OTHER CONTRIBUTOR, OR ANY DISTRIBUTOR OF
+ COVERED SOFTWARE, OR ANY SUPPLIER OF ANY OF SUCH PARTIES, BE
+ LIABLE TO ANY PERSON FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR
+ CONSEQUENTIAL DAMAGES OF ANY CHARACTER INCLUDING, WITHOUT
+ LIMITATION, DAMAGES FOR LOST PROFITS, LOSS OF GOODWILL, WORK
+ STOPPAGE, COMPUTER FAILURE OR MALFUNCTION, OR ANY AND ALL OTHER
+ COMMERCIAL DAMAGES OR LOSSES, EVEN IF SUCH PARTY SHALL HAVE BEEN
+ INFORMED OF THE POSSIBILITY OF SUCH DAMAGES. THIS LIMITATION OF
+ LIABILITY SHALL NOT APPLY TO LIABILITY FOR DEATH OR PERSONAL
+ INJURY RESULTING FROM SUCH PARTY'S NEGLIGENCE TO THE EXTENT
+ APPLICABLE LAW PROHIBITS SUCH LIMITATION. SOME JURISDICTIONS DO
+ NOT ALLOW THE EXCLUSION OR LIMITATION OF INCIDENTAL OR
+ CONSEQUENTIAL DAMAGES, SO THIS EXCLUSION AND LIMITATION MAY NOT
+ APPLY TO YOU.
+ 8. U.S. GOVERNMENT END USERS.
+ The Covered Software is a "commercial item," as that term is
+ defined in 48 C.F.R. 2.101 (Oct. 1995), consisting of "commercial
+ computer software" (as that term is defined at 48 C.F.R. ยค
+ 252.227-7014(a)(1)) and "commercial computer software
+ documentation" as such terms are used in 48 C.F.R. 12.212 (Sept.
+ 1995). Consistent with 48 C.F.R. 12.212 and 48 C.F.R. 227.7202-1
+ through 227.7202-4 (June 1995), all U.S. Government End Users
+ acquire Covered Software with only those rights set forth herein.
+ This U.S. Government Rights clause is in lieu of, and supersedes,
+ any other FAR, DFAR, or other clause or provision that addresses
+ Government rights in computer software under this License.
+ 9. MISCELLANEOUS.
+ This License represents the complete agreement concerning subject
+ matter hereof. If any provision of this License is held to be
+ unenforceable, such provision shall be reformed only to the
+ extent necessary to make it enforceable. This License shall be
+ governed by the law of the jurisdiction specified in a notice
+ contained within the Original Software (except to the extent
+ applicable law, if any, provides otherwise), excluding such
+ jurisdiction's conflict-of-law provisions. Any litigation
+ relating to this License shall be subject to the jurisdiction of
+ the courts located in the jurisdiction and venue specified in a
+ notice contained within the Original Software, with the losing
+ party responsible for costs, including, without limitation, court
+ costs and reasonable attorneys' fees and expenses. The
+ application of the United Nations Convention on Contracts for the
+ International Sale of Goods is expressly excluded. Any law or
+ regulation which provides that the language of a contract shall
+ be construed against the drafter shall not apply to this License.
+ You agree that You alone are responsible for compliance with the
+ United States export administration regulations (and the export
+ control laws and regulation of any other countries) when You use,
+ distribute or otherwise make available any Covered Software.
+ 10. RESPONSIBILITY FOR CLAIMS.
+ As between Initial Developer and the Contributors, each party is
+ responsible for claims and damages arising, directly or
+ indirectly, out of its utilization of rights under this License
+ and You agree to work with Initial Developer and Contributors to
+ distribute such responsibility on an equitable basis. Nothing
+ herein is intended or shall be deemed to constitute any admission
+ of liability.
+
+------------------------------------------------------------------------------------
+ MIT
+------------------------------------------------------------------------------------
+
+This product bundles jopt-simple 4.9, which is available under a "MIT Software License" license. For details, see http://jopt-simple.sourceforge.net
+This product bundles jcodings 1.0.8, which is available under a "MIT Software License" license. For details, see https://github.com/jruby/jcodings
+This product bundles joni 2.1.2, which is available under a "MIT Software License" license. For details, see https://github.com/jruby/joni
+This product bundles slf4j-api 1.7.10, which is available under a "MIT Software License" license. For details, see http://www.slf4j.org
+This product bundles slf4j-log4j12 1.7.10, which is available under a "MIT Software License" license. For details, see http://www.slf4j.org
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
diff --git a/metron-platform/metron-parsers/src/main/resources/META-INF/NOTICE b/metron-platform/metron-parsing/metron-parsing-storm/src/main/resources/META-INF/NOTICE
similarity index 98%
rename from metron-platform/metron-parsers/src/main/resources/META-INF/NOTICE
rename to metron-platform/metron-parsing/metron-parsing-storm/src/main/resources/META-INF/NOTICE
index d9212cd3e3..c773ab721f 100644
--- a/metron-platform/metron-parsers/src/main/resources/META-INF/NOTICE
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/main/resources/META-INF/NOTICE
@@ -1,5 +1,5 @@
-metron-parsers
+metron-parsing-storm
Copyright 2006-2016 The Apache Software Foundation
This product includes software developed at
diff --git a/metron-platform/metron-parsers/src/main/scripts/start_parser_topology.sh b/metron-platform/metron-parsing/metron-parsing-storm/src/main/scripts/start_parser_topology.sh
similarity index 97%
rename from metron-platform/metron-parsers/src/main/scripts/start_parser_topology.sh
rename to metron-platform/metron-parsing/metron-parsing-storm/src/main/scripts/start_parser_topology.sh
index bbbeaff789..db777dc234 100755
--- a/metron-platform/metron-parsers/src/main/scripts/start_parser_topology.sh
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/main/scripts/start_parser_topology.sh
@@ -18,7 +18,7 @@
#
METRON_VERSION=${project.version}
METRON_HOME=/usr/metron/$METRON_VERSION
-TOPOLOGY_JAR=metron-parsers-$METRON_VERSION-uber.jar
+TOPOLOGY_JAR=metron-parsing-storm-$METRON_VERSION-uber.jar
PARSER_CONTRIB=${PARSER_CONTRIB:-$METRON_HOME/parser_contrib}
EXTRA_ARGS="$@"
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/bolt/ParserBoltTest.java b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/bolt/ParserBoltTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/bolt/ParserBoltTest.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/bolt/ParserBoltTest.java
index 9f58d1cd89..0166a63d6e 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/bolt/ParserBoltTest.java
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/bolt/ParserBoltTest.java
@@ -25,8 +25,8 @@
import org.apache.metron.common.message.MessageGetStrategy;
import org.apache.metron.common.message.metadata.RawMessage;
import org.apache.metron.parsers.DefaultParserRunnerResults;
-import org.apache.metron.parsers.ParserRunnerResults;
import org.apache.metron.parsers.ParserRunnerImpl;
+import org.apache.metron.parsers.ParserRunnerResults;
import org.apache.metron.stellar.dsl.Context;
import org.apache.metron.storm.kafka.flux.SimpleStormKafkaBuilder.FieldsConfiguration;
import org.apache.metron.test.bolt.BaseBoltTest;
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/bolt/WriterBoltTest.java b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/bolt/WriterBoltTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/bolt/WriterBoltTest.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/bolt/WriterBoltTest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/BroIntegrationTest.java b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/integration/StormParserIntegrationTest.java
similarity index 56%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/BroIntegrationTest.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/integration/StormParserIntegrationTest.java
index c9cfe0afaf..03d55bb935 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/BroIntegrationTest.java
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/integration/StormParserIntegrationTest.java
@@ -1,4 +1,4 @@
-/**
+package org.apache.metron.parsers.integration;/*
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
@@ -15,17 +15,34 @@
* See the License for the specific language governing permissions and
* limitations under the License.
*/
-package org.apache.metron.parsers.integration;
-
-import org.apache.metron.parsers.integration.validation.SampleDataValidation;
import java.util.ArrayList;
import java.util.List;
+import org.apache.metron.parsers.integration.validation.ParserDriver;
+import org.apache.metron.parsers.integration.validation.SampleDataValidation;
+import org.apache.metron.parsers.integration.validation.StormParserDriver;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.junit.runners.Parameterized;
+import org.junit.runners.Parameterized.Parameter;
+import org.junit.runners.Parameterized.Parameters;
-public class BroIntegrationTest extends ParserIntegrationTest {
- @Override
- String getSensorType() {
- return "bro";
+@RunWith(Parameterized.class)
+public class StormParserIntegrationTest extends ParserIntegrationTest {
+
+ @Parameters(name = "{index}: sensorType={0}")
+ public static Iterable<String> data() {
+ return sensorTypes;
+ }
+
+ @Parameter
+ public String sensorType;
+
+ @Test
+ public void test() throws Exception {
+ ParserDriver driver = new StormParserDriver(sensorType, readSensorConfig(sensorType),
+ readGlobalConfig());
+ runTest(driver);
}
@Override
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/components/ParserTopologyComponent.java b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/integration/components/ParserTopologyComponent.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/components/ParserTopologyComponent.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/integration/components/ParserTopologyComponent.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/ParserDriver.java b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/integration/validation/StormParserDriver.java
similarity index 76%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/ParserDriver.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/integration/validation/StormParserDriver.java
index 31d87a7385..dfc454f2c7 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/integration/ParserDriver.java
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/integration/validation/StormParserDriver.java
@@ -15,28 +15,21 @@
* See the License for the specific language governing permissions and
* limitations under the License.
*/
-package org.apache.metron.parsers.integration;
+package org.apache.metron.parsers.integration.validation;
import static org.mockito.Matchers.eq;
import static org.mockito.Mockito.mock;
import static org.mockito.Mockito.when;
import java.io.IOException;
-import java.io.Serializable;
import java.util.ArrayList;
import java.util.Collections;
-import java.util.HashSet;
import java.util.List;
-
import org.apache.commons.lang.SerializationUtils;
import org.apache.metron.common.configuration.ParserConfigurations;
-import org.apache.metron.common.configuration.SensorParserConfig;
import org.apache.metron.common.configuration.writer.WriterConfiguration;
-import org.apache.metron.common.utils.JSONUtils;
import org.apache.metron.common.writer.MessageWriter;
import org.apache.metron.integration.ProcessorResult;
-import org.apache.metron.parsers.ParserRunner;
-import org.apache.metron.parsers.ParserRunnerImpl;
import org.apache.metron.parsers.bolt.ParserBolt;
import org.apache.metron.parsers.bolt.WriterHandler;
import org.apache.storm.task.OutputCollector;
@@ -45,9 +38,11 @@
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
-public class ParserDriver implements Serializable {
- private static final Logger LOG = LoggerFactory.getLogger(ParserBolt.class);
- public static class CollectingWriter implements MessageWriter<JSONObject>{
+public class StormParserDriver extends ParserDriver {
+ private static final Logger LOG = LoggerFactory.getLogger(StormParserDriver.class);
+
+ public static class CollectingWriter implements MessageWriter<JSONObject> {
+
List<byte[]> output;
public CollectingWriter(List<byte[]> output) {
this.output = output;
@@ -109,21 +104,23 @@ protected void handleError(String sensorType, byte[] originalMessage, Tuple tupl
}
}
-
- private ParserConfigurations config;
- private String sensorType;
- private ParserRunner parserRunner;
-
- public ParserDriver(String sensorType, String parserConfig, String globalConfig) throws IOException {
- SensorParserConfig sensorParserConfig = SensorParserConfig.fromBytes(parserConfig.getBytes());
- this.sensorType = sensorType == null ? sensorParserConfig.getSensorTopic() : sensorType;
- config = new ParserConfigurations();
- config.updateSensorParserConfig(this.sensorType, SensorParserConfig.fromBytes(parserConfig.getBytes()));
- config.updateGlobalConfig(JSONUtils.INSTANCE.load(globalConfig, JSONUtils.MAP_SUPPLIER));
-
- parserRunner = new ParserRunnerImpl(new HashSet<String>() {{
- add(sensorType);
- }});
+//
+// private ParserConfigurations config;
+// private String sensorType;
+// private ParserRunner parserRunner;
+//
+// public ParserDriver(String sensorType, String parserConfig, String globalConfig) throws IOException {
+// SensorParserConfig sensorParserConfig = SensorParserConfig.fromBytes(parserConfig.getBytes());
+// this.sensorType = sensorType == null ? sensorParserConfig.getSensorTopic() : sensorType;
+// config = new ParserConfigurations();
+// config.updateSensorParserConfig(this.sensorType, SensorParserConfig.fromBytes(parserConfig.getBytes()));
+// config.updateGlobalConfig(JSONUtils.INSTANCE.load(globalConfig, JSONUtils.MAP_SUPPLIER));
+//
+// parserRunner = new ParserRunnerImpl(new HashSet<String>() {{
+// add(sensorType);
+// }});
+ public StormParserDriver(String sensorType, String parserConfig, String globalConfig) throws IOException {
+ super(sensorType, parserConfig, globalConfig);
}
public ProcessorResult<List<byte[]>> run(Iterable<byte[]> in) {
@@ -144,5 +141,4 @@ public Tuple toTuple(byte[] record) {
when(ret.getBinary(eq(0))).thenReturn(record);
return ret;
}
-
}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/topology/ParserTopologyCLITest.java b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/topology/ParserTopologyCLITest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/parsers/topology/ParserTopologyCLITest.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/parsers/topology/ParserTopologyCLITest.java
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/writers/integration/SimpleHbaseEnrichmentWriterIntegrationTest.java b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/writers/integration/SimpleHbaseEnrichmentWriterIntegrationTest.java
similarity index 97%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/writers/integration/SimpleHbaseEnrichmentWriterIntegrationTest.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/writers/integration/SimpleHbaseEnrichmentWriterIntegrationTest.java
index 788df2da67..467429cc24 100644
--- a/metron-platform/metron-parsers/src/test/java/org/apache/metron/writers/integration/SimpleHbaseEnrichmentWriterIntegrationTest.java
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/writers/integration/SimpleHbaseEnrichmentWriterIntegrationTest.java
@@ -19,7 +19,15 @@
package org.apache.metron.writers.integration;
import com.google.common.collect.ImmutableList;
+import java.io.IOException;
+import java.util.ArrayList;
import java.util.Collections;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Properties;
+import java.util.Set;
import org.adrianwalker.multilinestring.Multiline;
import org.apache.hadoop.hbase.client.Result;
import org.apache.hadoop.hbase.util.Bytes;
@@ -45,15 +53,6 @@
import org.junit.Assert;
import org.junit.Test;
-import java.io.IOException;
-import java.util.ArrayList;
-import java.util.HashMap;
-import java.util.HashSet;
-import java.util.List;
-import java.util.Map;
-import java.util.Properties;
-import java.util.Set;
-
public class SimpleHbaseEnrichmentWriterIntegrationTest extends BaseIntegrationTest {
/**
@@ -102,9 +101,11 @@ public void test() throws UnableToStartException, IOException {
SensorParserConfig parserConfig = JSONUtils.INSTANCE.load(parserConfigJSON, SensorParserConfig.class);
+ System.out.println("Workspace: " + System.getProperty("user.dir"));
+ System.out.println("Configs path: ../" + TestConstants.SAMPLE_CONFIG_PATH);
ConfigUploadComponent configUploadComponent = new ConfigUploadComponent()
.withTopologyProperties(topologyProperties)
- .withGlobalConfigsPath(TestConstants.SAMPLE_CONFIG_PATH)
+ .withGlobalConfigsPath("../" + TestConstants.SAMPLE_CONFIG_PATH)
.withParserSensorConfig(sensorType, parserConfig);
ParserTopologyComponent parserTopologyComponent = new ParserTopologyComponent.Builder()
diff --git a/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/writers/integration/StormEnvelopedParserIntegrationTest.java b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/writers/integration/StormEnvelopedParserIntegrationTest.java
new file mode 100644
index 0000000000..4baa35386c
--- /dev/null
+++ b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/writers/integration/StormEnvelopedParserIntegrationTest.java
@@ -0,0 +1,52 @@
+/**
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements. See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership. The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.apache.metron.writers.integration;
+
+import java.io.IOException;
+import org.apache.metron.parsers.integration.EnvelopedParserIntegrationTest;
+import org.apache.metron.parsers.integration.validation.ParserDriver;
+import org.apache.metron.parsers.integration.validation.StormParserDriver;
+import org.junit.Test;
+
+public class StormEnvelopedParserIntegrationTest extends EnvelopedParserIntegrationTest {
+
+ @Test
+ public void testEnvelopedData() throws IOException {
+ ParserDriver driver = new StormParserDriver("test", parserConfig_default, "{}");
+ super.testEnvelopedData(driver);
+ }
+
+ @Test
+ public void testEnvelopedData_withMetadataPrefix() throws IOException {
+ ParserDriver driver = new StormParserDriver("test", parserConfig_withPrefix, "{}");
+ super.testEnvelopedData_withMetadataPrefix(driver);
+ }
+
+ @Test
+ public void testEnvelopedData_noMergeMetadata() throws IOException {
+ ParserDriver driver = new StormParserDriver("test", parserConfig_nomerge, "{}");
+ super.testEnvelopedData_noMergeMetadata(driver);
+ }
+
+ @Test
+ public void testCiscoPixEnvelopingCisco302020() throws Exception {
+ ParserDriver syslogDriver = new StormParserDriver("ciscoPix", ciscoPixSyslogConfig, "{}");
+ ParserDriver driver = new StormParserDriver("cisco302020", cisco302020Config, "{}");
+ super.testCiscoPixEnvelopingCisco302020(syslogDriver, driver);
+ }
+}
diff --git a/metron-platform/metron-parsers/src/test/java/org/apache/metron/writers/integration/WriterBoltIntegrationTest.java b/metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/writers/integration/WriterBoltIntegrationTest.java
similarity index 100%
rename from metron-platform/metron-parsers/src/test/java/org/apache/metron/writers/integration/WriterBoltIntegrationTest.java
rename to metron-platform/metron-parsing/metron-parsing-storm/src/test/java/org/apache/metron/writers/integration/WriterBoltIntegrationTest.java
diff --git a/metron-platform/metron-parsers/src/test/resources/log4j.properties b/metron-platform/metron-parsing/metron-parsing-storm/src/test/resources/log4j.properties
similarity index 100%
rename from metron-platform/metron-parsers/src/test/resources/log4j.properties
rename to metron-platform/metron-parsing/metron-parsing-storm/src/test/resources/log4j.properties
diff --git a/metron-platform/metron-parsing/pom.xml b/metron-platform/metron-parsing/pom.xml
new file mode 100644
index 0000000000..f349551c84
--- /dev/null
+++ b/metron-platform/metron-parsing/pom.xml
@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+ <modelVersion>4.0.0</modelVersion>
+ <artifactId>metron-parsing</artifactId>
+ <packaging>pom</packaging>
+ <name>metron-parsing</name>
+ <parent>
+ <artifactId>metron-platform</artifactId>
+ <groupId>org.apache.metron</groupId>
+ <version>0.7.0</version>
+ </parent>
+ <description>Metron parsers and platform support</description>
+ <url>https://metron.apache.org/</url>
+ <scm>
+ <connection>scm:git:https://gitbox.apache.org/repos/asf/metron.git</connection>
+ <developerConnection>scm:git:https://gitbox.apache.org/repos/asf/metron.git</developerConnection>
+ <tag>HEAD</tag>
+ <url>https://gitbox.apache.org/repos/asf/metron.git</url>
+ </scm>
+
+ <licenses>
+ <license>
+ <name>The Apache Software License, Version 2.0</name>
+ <url>http://www.apache.org/licenses/LICENSE-2.0.txt</url>
+ <distribution>repo</distribution>
+ </license>
+ </licenses>
+ <modules>
+ <module>metron-parsers</module>
+ <module>metron-parsers-common</module>
+ <module>metron-parsing-storm</module>
+ </modules>
+</project>
\ No newline at end of file
diff --git a/metron-platform/metron-test-utilities/src/main/java/org/apache/metron/TestConstants.java b/metron-platform/metron-test-utilities/src/main/java/org/apache/metron/TestConstants.java
index 2b39f9d567..53e49db162 100644
--- a/metron-platform/metron-test-utilities/src/main/java/org/apache/metron/TestConstants.java
+++ b/metron-platform/metron-test-utilities/src/main/java/org/apache/metron/TestConstants.java
@@ -20,7 +20,8 @@
public class TestConstants {
public final static String SAMPLE_CONFIG_PATH = "../metron-integration-test/src/main/config/zookeeper/";
- public final static String PARSER_CONFIGS_PATH = "../metron-parsers/src/main/config/zookeeper/";
+ public final static String PARSER_CONFIGS_PATH = "../metron-parsing/metron-parsers/src/main/config/zookeeper/";
+ public final static String PARSER_COMMON_CONFIGS_PATH = "../metron-parsing/metron-parsers-common/src/main/config/zookeeper/";
public final static String ENRICHMENTS_CONFIGS_PATH = "../metron-enrichment/src/main/config/zookeeper/";
public final static String SAMPLE_DATA_PATH = "../metron-integration-test/src/main/sample/data/";
public final static String SAMPLE_DATA_INPUT_PATH = "../metron-integration-test/src/main/sample/data/yaf/raw/";
diff --git a/metron-platform/metron-test-utilities/src/main/java/org/apache/metron/test/utils/SampleDataUtils.java b/metron-platform/metron-test-utilities/src/main/java/org/apache/metron/test/utils/SampleDataUtils.java
index 0e3e4e631f..bc2561b060 100644
--- a/metron-platform/metron-test-utilities/src/main/java/org/apache/metron/test/utils/SampleDataUtils.java
+++ b/metron-platform/metron-test-utilities/src/main/java/org/apache/metron/test/utils/SampleDataUtils.java
@@ -25,8 +25,8 @@
public class SampleDataUtils {
- public static String getSampleDataPath(String sensorType, TestDataType testDataType) throws FileNotFoundException {
- File sensorSampleDataPath = new File(TestConstants.SAMPLE_DATA_PATH, sensorType);
+ public static String getSampleDataPath(String pathPrefix, String sensorType, TestDataType testDataType) throws FileNotFoundException {
+ File sensorSampleDataPath = new File(pathPrefix + "/" + TestConstants.SAMPLE_DATA_PATH, sensorType);
if (sensorSampleDataPath.exists() && sensorSampleDataPath.isDirectory()) {
File sampleDataPath = new File(sensorSampleDataPath, testDataType.getDirectoryName());
if (sampleDataPath.exists() && sampleDataPath.isDirectory()) {
@@ -38,4 +38,8 @@ public static String getSampleDataPath(String sensorType, TestDataType testDataT
}
throw new FileNotFoundException("Could not find data in " + TestConstants.SAMPLE_DATA_PATH + sensorType + "/" + testDataType.getDirectoryName());
}
+
+ public static String getSampleDataPath(String sensorType, TestDataType testDataType) throws FileNotFoundException {
+ return getSampleDataPath("", sensorType, testDataType);
+ }
}
diff --git a/metron-platform/metron-writer/README.md b/metron-platform/metron-writer/README.md
index 21cdbcac86..bbec39be7c 100644
--- a/metron-platform/metron-writer/README.md
+++ b/metron-platform/metron-writer/README.md
@@ -29,7 +29,7 @@ the topic for the message.
The configuration for this writer is held in the individual Sensor
Configurations:
* [Enrichment](../metron-enrichment/README.md#sensor-enrichment-configuration) under the `config` element
-* [Parsers](../metron-parsers/README.md#parser-configuration) in the `parserConfig` element
+* [Parsers](../metron-parsers-common/README.md#parser-configuration) in the `parserConfig` element
* Profiler - Unsupported currently
In each of these, the kafka writer can be configured via a map which has
diff --git a/metron-platform/pom.xml b/metron-platform/pom.xml
index 0eab08526b..c793c4c21f 100644
--- a/metron-platform/pom.xml
+++ b/metron-platform/pom.xml
@@ -45,7 +45,6 @@
<module>metron-common</module>
<module>metron-enrichment</module>
<module>metron-solr</module>
- <module>metron-parsers</module>
<module>metron-job</module>
<module>metron-pcap-backend</module>
<module>metron-data-management</module>
@@ -61,7 +60,8 @@
<module>metron-storm-kafka</module>
<module>metron-storm-kafka-override</module>
<module>metron-zookeeper</module>
- </modules>
+ <module>metron-parsing</module>
+ </modules>
<dependencies>
<dependency>
<groupId>org.slf4j</groupId>
diff --git a/pom.xml b/pom.xml
index e12a8b0b87..24a7ebc20c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -360,8 +360,8 @@
<exclude>checkstyle.xml</exclude>
<!-- Alerts UI e2e test data -->
<exclude>e2e/mock-data/alerts_ui_e2e_index.data</exclude>
- <!-- retry files generated by Ansible during a failure -->
- <exclude>**/*.retry</exclude>
+ <!-- retry files generated by Ansible during a failure -->
+ <exclude>**/*.retry</exclude>
</excludes>
</configuration>
</plugin>
diff --git a/site-book/bin/generate-md.sh b/site-book/bin/generate-md.sh
index 966ee06d77..60549f8eaa 100755
--- a/site-book/bin/generate-md.sh
+++ b/site-book/bin/generate-md.sh
@@ -64,7 +64,7 @@ RESOURCE_LIST=(
metron-deployment/readme-images/enable-kerberos-started.png
metron-deployment/readme-images/enable-kerberos.png
metron-platform/metron-job/metron-job_state_statechart_diagram.svg
- metron-platform/metron-parsers/parser_arch.png
+ metron-platform/metron-parsing/metron-parsers-common/parser_arch.png
metron-platform/metron-indexing/indexing_arch.png
metron-platform/metron-enrichment/enrichment_arch.png
metron-analytics/metron-maas-service/maas_arch.png
@@ -96,8 +96,8 @@ HREF_REWRITE_LIST=(
metron-platform/metron-enrichment/README.md 's#(enrichment_arch.png)#(../../images/enrichment_arch.png)#g'
metron-platform/metron-indexing/README.md 's#(indexing_arch.png)#(../../images/indexing_arch.png)#g'
metron-platform/metron-job/README.md 's#(metron-job_state_statechart_diagram.svg)#(../../images/metron-job_state_statechart_diagram.svg)#g'
- metron-platform/metron-parsers/README.md 's#(parser_arch.png)#(../../images/parser_arch.png)#g'
- metron-platform/metron-parsers/ParserChaining.md 's#(../../use-cases/parser_chaining/message_routing_high_level.svg)#(../../images/message_routing_high_level.svg)#g'
+ metron-platform/metron-parsing/metron-parsers-common/README.md 's#(parser_arch.png)#(../../images/parser_arch.png)#g'
+ metron-platform/metron-parsing/metron-parsers-common/ParserChaining.md 's#(../../use-cases/parser_chaining/message_routing_high_level.svg)#(../../images/message_routing_high_level.svg)#g'
metron-analytics/metron-maas-service/README.md 's#(maas_arch.png)#(../../images/maas_arch.png)#g'
metron-contrib/metron-performance/README.md 's#(performance_measurement.png)#(../../images/performance_measurement.png)#g'
use-cases/forensic_clustering/README.md 's#(find_alerts.png)#(../../images/find_alerts.png)#g'
diff --git a/site/current-book/metron-platform/metron-parsers/index.html b/site/current-book/metron-platform/metron-parsers/index.html
index 15440a1b6e..06cfb47b12 100644
--- a/site/current-book/metron-platform/metron-parsers/index.html
+++ b/site/current-book/metron-platform/metron-parsers/index.html
@@ -665,7 +665,7 @@ <h3><a name="Java_Parser_Adapters"></a>Java Parser Adapters</h3>
<p>Java parser adapters are intended for higher-velocity topologies and are not easily changed or extended. As the adoption of Metron continues we plan on extending our library of Java adapters to process more log formats. As of this moment the Java adapters included with Metron are:</p>
<ul>
-<li>org.apache.metron.parsers.ise.BasicIseParser : Parse ISE messages</li>
+<li>BasicIseParser : Parse ISE messages</li>
<li>org.apache.metron.parsers.bro.BasicBroParser : Parse Bro messages</li>
<li>org.apache.metron.parsers.sourcefire.BasicSourcefireParser : Parse Sourcefire messages</li>
<li>org.apache.metron.parsers.lancope.BasicLancopeParser : Parse Lancope messages</li>
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services