# Copyright (c) 2010 Flowerfire, Inc. All Rights Reserved. ias = { plugin_version = "1.0.4" info.1.manfacturer = "Microsoft" info.1.device = "IAS/NPS" info.1.version.1 = "" # 2007-06-04 - 1.0.1 - GMF - Added acct-session-time and acct-output-octets to numerical fields. # 2008-09-19 - 1.0.2 - MSG - Added db and log fields for ms-ras-client-name # 2009-10-29 - 1.0.3 - gas - added support for np_policy_name (#4149) & added new namd (NPS, Network Policy Server to format_label) # 2010-12-14 - 1.0.4 - MSG - Edited info lines. # The name of the log format log.format.format_label = "Microsoft IAS/NPS Log Format" log.miscellaneous.log_data_type = "generic" log.miscellaneous.log_format_type = "firewall" # The log is in this format if any of the first ten lines match this regular expression log.format.autodetect_regular_expression = "^[0-9.]*,[^,]*,[0-9][0-9]/[0-9][0-9]/[0-9][0-9][0-9][0-9],[0-9][0-9]:[0-9][0-9]:[0-9][0-9],[A-Z]*,[A-Z0-9]*" # The format of dates and times in this log log.format.date_format = "mm/dd/yyyy" log.format.time_format = "hh:mm:ss" # All log field parsing will be done using the parsing filters log.format.parse_only_with_filters = "true" # Log entries are called "events" statistics.miscellaneous.entry_name = "events" # Don't track these fields as discrete database fields auto_setup.omit_database_fields = "Acct_Input_Octets,Acct_Output_Octets,Acct_Input_Packets,Acct_Output_Packets" # Don't allow dividers in the listed field values-- the dividers are the same as separators in this format. log.format.allow_spaces_in_listed_field_values = "false" # Log fields log.fields = { # Header fields date = { label = "$lang_stats.field_labels.date" type = "date" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # date time = { label = "$lang_stats.field_labels.time" type = "time" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # time hostname = { label = "$lang_stats.field_labels.hostname" type = "host" index = 0 subindex = 0 hierarchy_dividers = "." left_to_right = false leading_divider = "false" } # hostname authenticated_user = { label = "$lang_stats.field_labels.authenticated_user" type = "flat" index = 0 subindex = 0 } # authenticated_user server = { label = "$lang_stats.field_labels.server" type = "flat" index = 0 subindex = 0 } # server service = { label = "$lang_stats.field_labels.service" type = "flat" index = 0 subindex = 0 } # service # Other fields user_name = { label = "$lang_stats.field_labels.user_name" type = "flat" index = 0 subindex = 0 } # user_name nas_ip_address = { label = "$lang_stats.field_labels.nas_ip_address" type = "flat" index = 0 subindex = 0 } # nas_ip_address nas_port = { label = "$lang_stats.field_labels.nas_port" type = "flat" index = 0 subindex = 0 } # nas_port service_type = { label = "$lang_stats.field_labels.service_type" type = "flat" index = 0 subindex = 0 } # service_type framed_protocol = { label = "$lang_stats.field_labels.framed_protocol" type = "flat" index = 0 subindex = 0 } # framed_protocol framed_ip_address = { label = "$lang_stats.field_labels.framed_ip_address" type = "flat" index = 0 subindex = 0 } # framed_ip_address framed_ip_netmask = { label = "$lang_stats.field_labels.framed_ip_netmask" type = "flat" index = 0 subindex = 0 } # framed_ip_netmask framed_routing = { label = "$lang_stats.field_labels.framed_routing" type = "flat" index = 0 subindex = 0 } # framed_routing filter_id = { label = "$lang_stats.field_labels.filter_id" type = "flat" index = 0 subindex = 0 } # filter_id framed_mtu = { label = "$lang_stats.field_labels.framed_mtu" type = "flat" index = 0 subindex = 0 } # framed_mtu framed_compression = { label = "$lang_stats.field_labels.framed_compression" type = "flat" index = 0 subindex = 0 } # framed_compression login_ip_host = { label = "$lang_stats.field_labels.login_ip_host" type = "flat" index = 0 subindex = 0 } # login_ip_host login_service = { label = "$lang_stats.field_labels.login_service" type = "flat" index = 0 subindex = 0 } # login_service login_tcp_port = { label = "$lang_stats.field_labels.login_tcp_port" type = "flat" index = 0 subindex = 0 } # login_tcp_port reply_message = { label = "$lang_stats.field_labels.reply_message" type = "flat" index = 0 subindex = 0 } # reply_message callback_number = { label = "$lang_stats.field_labels.callback_number" type = "flat" index = 0 subindex = 0 } # callback_number callback_id = { label = "$lang_stats.field_labels.callback_id" type = "flat" index = 0 subindex = 0 } # callback_id framed_route = { label = "$lang_stats.field_labels.framed_route" type = "flat" index = 0 subindex = 0 } # framed_route framed_ipx_network = { label = "$lang_stats.field_labels.framed_ipx_network" type = "flat" index = 0 subindex = 0 } # framed_ipx_network class = { label = "$lang_stats.field_labels.class" type = "flat" index = 0 subindex = 0 } # class vendor_specific = { label = "$lang_stats.field_labels.vendor_specific" type = "flat" index = 0 subindex = 0 } # vendor_specific session_timeout = { label = "$lang_stats.field_labels.session_timeout" type = "flat" index = 0 subindex = 0 } # session_timeout idle_timeout = { label = "$lang_stats.field_labels.idle_timeout" type = "flat" index = 0 subindex = 0 } # idle_timeout termination_action = { label = "$lang_stats.field_labels.termination_action" type = "flat" index = 0 subindex = 0 } # termination_action called_station_id = { label = "$lang_stats.field_labels.called_station_id" type = "flat" index = 0 subindex = 0 } # called_station_id calling_station_id = { label = "$lang_stats.field_labels.calling_station_id" type = "flat" index = 0 subindex = 0 } # calling_station_id nas_identifier = { label = "$lang_stats.field_labels.nas_identifier" type = "flat" index = 0 subindex = 0 } # nas_identifier login_lat_service = { label = "$lang_stats.field_labels.login_lat_service" type = "flat" index = 0 subindex = 0 } # login_lat_service login_lat_node = { label = "$lang_stats.field_labels.login_lat_node" type = "flat" index = 0 subindex = 0 } # login_lat_node login_lat_group = { label = "$lang_stats.field_labels.login_lat_group" type = "flat" index = 0 subindex = 0 } # login_lat_group framed_appletalk_link = { label = "$lang_stats.field_labels.framed_appletalk_link" type = "flat" index = 0 subindex = 0 } # framed_appletalk_link framed_appletalk_network = { label = "$lang_stats.field_labels.framed_appletalk_network" type = "flat" index = 0 subindex = 0 } # framed_appletalk_network framed_appletalk_zone = { label = "$lang_stats.field_labels.framed_appletalk_zone" type = "flat" index = 0 subindex = 0 } # framed_appletalk_zone acct_status_type = { label = "$lang_stats.field_labels.acct_status_type" type = "flat" index = 0 subindex = 0 } # acct_status_type acct_delay_time = { label = "$lang_stats.field_labels.acct_delay_time" type = "flat" index = 0 subindex = 0 } # acct_delay_time acct_input_octets = { label = "$lang_stats.field_labels.acct_input_octets" type = "size" index = 0 subindex = 0 hierarchy_dividers = "" left_to_right = false leading_divider = "false" } # acct_input_octets acct_output_octets = { label = "$lang_stats.field_labels.acct_output_octets" type = "flat" index = 0 subindex = 0 } # acct_output_octets acct_session_id = { label = "$lang_stats.field_labels.acct_session_id" type = "flat" index = 0 subindex = 0 } # acct_session_id acct_authentic = { label = "$lang_stats.field_labels.acct_authentic" type = "flat" index = 0 subindex = 0 } # acct_authentic acct_session_time = { label = "$lang_stats.field_labels.acct_session_time" type = "flat" index = 0 subindex = 0 } # acct_session_time acct_input_packets = { label = "$lang_stats.field_labels.acct_input_packets" type = "flat" index = 0 subindex = 0 } # acct_input_packets acct_output_packets = { label = "$lang_stats.field_labels.acct_output_packets" type = "flat" index = 0 subindex = 0 } # acct_output_packets acct_terminate_clause = { label = "$lang_stats.field_labels.acct_terminate_clause" type = "flat" index = 0 subindex = 0 } # acct_terminate_clause acct_multi_ssn_id = { label = "$lang_stats.field_labels.acct_multi_ssn_id" type = "flat" index = 0 subindex = 0 } # acct_multi_ssn_id acct_link_count = { label = "$lang_stats.field_labels.acct_link_count" type = "flat" index = 0 subindex = 0 } # acct_link_count event_timestamp = { label = "$lang_stats.field_labels.event_timestamp" type = "flat" index = 0 subindex = 0 } # event_timestamp nas_port_type = { label = "$lang_stats.field_labels.nas_port_type" type = "flat" index = 0 subindex = 0 } # nas_port_type port_limit = { label = "$lang_stats.field_labels.port_limit" type = "flat" index = 0 subindex = 0 } # port_limit login_lat_port = { label = "$lang_stats.field_labels.login_lat_port" type = "flat" index = 0 subindex = 0 } # login_lat_port tunnel_type = { label = "$lang_stats.field_labels.tunnel_type" type = "flat" index = 0 subindex = 0 } # tunnel_type tunnel_medium_type = { label = "$lang_stats.field_labels.tunnel_medium_type" type = "flat" index = 0 subindex = 0 } # tunnel_medium_type tunnel_client_endpt = { label = "$lang_stats.field_labels.tunnel_client_endpt" type = "flat" index = 0 subindex = 0 } # tunnel_client_endpt tunnel_server_endpt = { label = "$lang_stats.field_labels.tunnel_server_endpt" type = "flat" index = 0 subindex = 0 } # tunnel_server_endpt acct_tunnel_conn = { label = "$lang_stats.field_labels.acct_tunnel_conn" type = "flat" index = 0 subindex = 0 } # acct_tunnel_conn password_retry = { label = "$lang_stats.field_labels.password_retry" type = "flat" index = 0 subindex = 0 } # password_retry prompt = { label = "$lang_stats.field_labels.prompt" type = "flat" index = 0 subindex = 0 } # prompt connect_info = { label = "$lang_stats.field_labels.connect_info" type = "flat" index = 0 subindex = 0 } # connect_info configuration_token = { label = "$lang_stats.field_labels.configuration_token" type = "flat" index = 0 subindex = 0 } # configuration_token tunnel_pvt_group_id = { label = "$lang_stats.field_labels.tunnel_pvt_group_id" type = "flat" index = 0 subindex = 0 } # tunnel_pvt_group_id tunnel_assignment_id = { label = "$lang_stats.field_labels.tunnel_assignment_id" type = "flat" index = 0 subindex = 0 } # tunnel_assignment_id tunnel_preference = { label = "$lang_stats.field_labels.tunnel_preference" type = "flat" index = 0 subindex = 0 } # tunnel_preference acct_interim_interval = { label = "$lang_stats.field_labels.acct_interim_interval" type = "flat" index = 0 subindex = 0 } # acct_interim_interval ascend = { label = "$lang_stats.field_labels.ascend" type = "flat" index = 0 subindex = 0 } # ascend saved_radius_framed_route = { label = "$lang_stats.field_labels.saved_radius_framed_route" type = "flat" index = 0 subindex = 0 } # saved_radius_framed_route client_ip_address = { label = "$lang_stats.field_labels.client_ip_address" type = "flat" index = 0 subindex = 0 } # client_ip_address nas_manufacturer = { label = "$lang_stats.field_labels.nas_manufacturer" type = "flat" index = 0 subindex = 0 } # nas_manufacturer ms_chap_error = { label = "$lang_stats.field_labels.ms_chap_error" type = "flat" index = 0 subindex = 0 } # ms_chap_error authentication_type = { label = "$lang_stats.field_labels.authentication_type" type = "flat" index = 0 subindex = 0 } # authentication_type client_friendly_name = { label = "$lang_stats.field_labels.client_friendly_name" type = "flat" index = 0 subindex = 0 } # client_friendly_name sam_account_name = { label = "$lang_stats.field_labels.sam_account_name" type = "flat" index = 0 subindex = 0 } # sam_account_name fully_qualified_user_name = { label = "$lang_stats.field_labels.fully_qualified_user_name" type = "flat" index = 0 subindex = 0 } # fully_qualified_user_name eap_friendly_name = { label = "$lang_stats.field_labels.eap_friendly_name" type = "flat" index = 0 subindex = 0 } # eap_friendly_name packet_type = { label = "$lang_stats.field_labels.packet_type" type = "flat" index = 0 subindex = 0 } # packet_type # 500-class ip: fields ip_source_ip = { label = "$lang_stats.field_labels.ip_source_ip" type = "flat" index = 0 subindex = 0 } # ip_source_ip ip_source_port = { label = "$lang_stats.field_labels.ip_source_port" type = "flat" index = 0 subindex = 0 } # ip_source_port ip_destination_ip = { label = "$lang_stats.field_labels.ip_destination_ip" type = "flat" index = 0 subindex = 0 } # ip_destination_ip ip_destination_port = { label = "$lang_stats.field_labels.ip_destination_port" type = "flat" index = 0 subindex = 0 } # ip_destination_port ms_ras_client_name = { label = "$lang_stats.field_labels.ms_ras_client_name" type = "flat" index = 0 subindex = 0 } # ms_ras_client_name np_policy_name = "" } # log.fields # # Log Parsing Filters log.parsing_filters = { # Parse out the header 1 = { label = "1" comment = "" value = "collect_fields_using_regexp('^()([^,]*),([^,]*),([^,]*),([^,]*),([^,]*),([^,]*)', '*KEY*,hostname,authenticated_user,date,time,service,server')" } # 1 # Parse out the comma-separated, comma-divided variables 2 = { label = "2" comment = "" value = "collect_listed_fields_using_regexp('^()[^,]*,[^,]*,[^,]*,[^,]*,[^,]*,[^,]*,(.*)$', ',', ',', '1=user-name|4=nas-ip-address|5=nas-port|6=service-type|7=framed-protocol|8=framed-ip-address|9=framed-ip-netmask|10=framed-routing|11=filter-id|12=framed-mtu|13=framed-compression|14=login-ip-host|15=login-service|16=login-tcp-port|18=reply-message|19=callback-number|20=callback-id|22=framed-route|23=framed-ipx-network|25=class|26=vendor-specific|27=session-timeout|28=idle-timeout|29=termination-action|30=called-station-id|31=calling-station-id|32=nas-identifier|34=login-lat-service|35=login-lat-node|36=login-lat-group|37=framed-appletalk-link|38=framed-appletalk-network|39=framed-appletalk-zone|40=acct-status-type|41=acct-delay-time|42=acct-input-octets|43=acct-output-octets|44=acct-session-id|45=acct-authentic|46=acct-session-time|47=acct-input-packets|48=acct-output-packets|49=acct-terminate-clause|50=acct-multi-ssn-id|51=acct-link-count|55=event-timestamp|61=nas-port-type|62=port-limit|63=login-lat-port|64=tunnel-type|65=tunnel-medium-type|66=tunnel-client-endpt|67=tunnel-server-endpt|68=acct-tunnel-conn|75=password-retry|76=prompt|77=connect-info|78=configuration-token|81=tunnel-pvt-group-id|82=tunnel-assignment-id|83=tunnel-preference|86=acct-interim-interval|107=ascend|4100=saved-radius-framed-route|4108=client-ip-address|4116=nas-manufacturer|4121=ms-chap-error|4127=authentication-type|4128=client-friendly-name|4129=sam-account-name|4130=fully-qualified-user-name|4132=eap-friendly-name|4136=packet-type|4159=ms-ras-client-name|4149=np_policy_name')" } # 2 # Accept this log entry 3 = { label = "3" comment = "" value = "accept_collected_entry_using_regexp('()', false)" } # 3 } # log.parsing_filters # Database fields database.fields = { date_time = { label = "$lang_stats.field_labels.date_time" log_field = "date_time" type = "string" suppress_top = 0 suppress_bottom = 3 display_format_type = "date_time" } # date_time day_of_week = { label = "$lang_stats.field_labels.day_of_week" log_field = "day_of_week" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "day_of_week" } # day_of_week hour_of_day = { label = "$lang_stats.field_labels.hour_of_day" log_field = "hour_of_day" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hour_of_day" } # hour_of_day server = { label = "$lang_stats.field_labels.server" log_field = "server" type = "string" suppress_top = 0 suppress_bottom = 2 } # server service = { label = "$lang_stats.field_labels.service" log_field = "service" type = "string" suppress_top = 0 suppress_bottom = 2 } # service hostname = { label = "$lang_stats.field_labels.hostname" log_field = "hostname" type = "string" suppress_top = 0 suppress_bottom = 2 display_format_type = "hostname" } # hostname domain_description = { label = "$lang_stats.field_labels.domain_description" log_field = "domain_description" type = "string" suppress_top = 0 suppress_bottom = 2 } # domain_description location = { label = "$lang_stats.field_labels.location" log_field = "location" type = "string" suppress_top = 0 suppress_bottom = 3 } # location authenticated_user = { label = "$lang_stats.field_labels.authenticated_user" log_field = "authenticated_user" type = "string" suppress_top = 0 suppress_bottom = 2 } # authenticated_user user_name = { label = "$lang_stats.field_labels.user_name" log_field = "user_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # user_name nas_ip_address = { label = "$lang_stats.field_labels.nas_ip_address" log_field = "nas_ip_address" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_ip_address nas_port = { label = "$lang_stats.field_labels.nas_port" log_field = "nas_port" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_port service_type = { label = "$lang_stats.field_labels.service_type" log_field = "service_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # service_type framed_protocol = { label = "$lang_stats.field_labels.framed_protocol" log_field = "framed_protocol" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_protocol framed_ip_address = { label = "$lang_stats.field_labels.framed_ip_address" log_field = "framed_ip_address" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_ip_address framed_ip_netmask = { label = "$lang_stats.field_labels.framed_ip_netmask" log_field = "framed_ip_netmask" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_ip_netmask framed_routing = { label = "$lang_stats.field_labels.framed_routing" log_field = "framed_routing" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_routing filter_id = { label = "$lang_stats.field_labels.filter_id" log_field = "filter_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # filter_id framed_mtu = { label = "$lang_stats.field_labels.framed_mtu" log_field = "framed_mtu" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_mtu framed_compression = { label = "$lang_stats.field_labels.framed_compression" log_field = "framed_compression" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_compression login_ip_host = { label = "$lang_stats.field_labels.login_ip_host" log_field = "login_ip_host" type = "string" suppress_top = 0 suppress_bottom = 2 } # login_ip_host login_service = { label = "$lang_stats.field_labels.login_service" log_field = "login_service" type = "string" suppress_top = 0 suppress_bottom = 2 } # login_service login_tcp_port = { label = "$lang_stats.field_labels.login_tcp_port" log_field = "login_tcp_port" type = "string" suppress_top = 0 suppress_bottom = 2 } # login_tcp_port reply_message = { label = "$lang_stats.field_labels.reply_message" log_field = "reply_message" type = "string" suppress_top = 0 suppress_bottom = 2 } # reply_message callback_number = { label = "$lang_stats.field_labels.callback_number" log_field = "callback_number" type = "string" suppress_top = 0 suppress_bottom = 2 } # callback_number callback_id = { label = "$lang_stats.field_labels.callback_id" log_field = "callback_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # callback_id framed_route = { label = "$lang_stats.field_labels.framed_route" log_field = "framed_route" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_route framed_ipx_network = { label = "$lang_stats.field_labels.framed_ipx_network" log_field = "framed_ipx_network" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_ipx_network class = { label = "$lang_stats.field_labels.class" log_field = "class" type = "string" suppress_top = 0 suppress_bottom = 2 } # class vendor_specific = { label = "$lang_stats.field_labels.vendor_specific" log_field = "vendor_specific" type = "string" suppress_top = 0 suppress_bottom = 2 } # vendor_specific session_timeout = { label = "$lang_stats.field_labels.session_timeout" log_field = "session_timeout" type = "string" suppress_top = 0 suppress_bottom = 2 } # session_timeout idle_timeout = { label = "$lang_stats.field_labels.idle_timeout" log_field = "idle_timeout" type = "string" suppress_top = 0 suppress_bottom = 2 } # idle_timeout termination_action = { label = "$lang_stats.field_labels.termination_action" log_field = "termination_action" type = "string" suppress_top = 0 suppress_bottom = 2 } # termination_action called_station_id = { label = "$lang_stats.field_labels.called_station_id" log_field = "called_station_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # called_station_id calling_station_id = { label = "$lang_stats.field_labels.calling_station_id" log_field = "calling_station_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # calling_station_id nas_identifier = { label = "$lang_stats.field_labels.nas_identifier" log_field = "nas_identifier" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_identifier login_lat_service = { label = "$lang_stats.field_labels.login_lat_service" log_field = "login_lat_service" type = "string" suppress_top = 0 suppress_bottom = 2 } # login_lat_service login_lat_node = { label = "$lang_stats.field_labels.login_lat_node" log_field = "login_lat_node" type = "string" suppress_top = 0 suppress_bottom = 2 } # login_lat_node login_lat_group = { label = "$lang_stats.field_labels.login_lat_group" log_field = "login_lat_group" type = "string" suppress_top = 0 suppress_bottom = 2 } # login_lat_group framed_appletalk_link = { label = "$lang_stats.field_labels.framed_appletalk_link" log_field = "framed_appletalk_link" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_appletalk_link framed_appletalk_network = { label = "$lang_stats.field_labels.framed_appletalk_network" log_field = "framed_appletalk_network" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_appletalk_network framed_appletalk_zone = { label = "$lang_stats.field_labels.framed_appletalk_zone" log_field = "framed_appletalk_zone" type = "string" suppress_top = 0 suppress_bottom = 2 } # framed_appletalk_zone acct_status_type = { label = "$lang_stats.field_labels.acct_status_type" log_field = "acct_status_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_status_type acct_delay_time = { label = "$lang_stats.field_labels.acct_delay_time" log_field = "acct_delay_time" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_delay_time acct_session_id = { label = "$lang_stats.field_labels.acct_session_id" log_field = "acct_session_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_session_id acct_authentic = { label = "$lang_stats.field_labels.acct_authentic" log_field = "acct_authentic" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_authentic acct_terminate_clause = { label = "$lang_stats.field_labels.acct_terminate_clause" log_field = "acct_terminate_clause" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_terminate_clause acct_multi_ssn_id = { label = "$lang_stats.field_labels.acct_multi_ssn_id" log_field = "acct_multi_ssn_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_multi_ssn_id acct_link_count = { label = "$lang_stats.field_labels.acct_link_count" log_field = "acct_link_count" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_link_count event_timestamp = { label = "$lang_stats.field_labels.event_timestamp" log_field = "event_timestamp" type = "string" suppress_top = 0 suppress_bottom = 2 } # event_timestamp nas_port_type = { label = "$lang_stats.field_labels.nas_port_type" log_field = "nas_port_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_port_type port_limit = { label = "$lang_stats.field_labels.port_limit" log_field = "port_limit" type = "string" suppress_top = 0 suppress_bottom = 2 } # port_limit login_lat_port = { label = "$lang_stats.field_labels.login_lat_port" log_field = "login_lat_port" type = "string" suppress_top = 0 suppress_bottom = 2 } # login_lat_port tunnel_type = { label = "$lang_stats.field_labels.tunnel_type" log_field = "tunnel_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_type tunnel_medium_type = { label = "$lang_stats.field_labels.tunnel_medium_type" log_field = "tunnel_medium_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_medium_type tunnel_client_endpt = { label = "$lang_stats.field_labels.tunnel_client_endpt" log_field = "tunnel_client_endpt" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_client_endpt tunnel_server_endpt = { label = "$lang_stats.field_labels.tunnel_server_endpt" log_field = "tunnel_server_endpt" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_server_endpt acct_tunnel_conn = { label = "$lang_stats.field_labels.acct_tunnel_conn" log_field = "acct_tunnel_conn" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_tunnel_conn password_retry = { label = "$lang_stats.field_labels.password_retry" log_field = "password_retry" type = "string" suppress_top = 0 suppress_bottom = 2 } # password_retry prompt = { label = "$lang_stats.field_labels.prompt" log_field = "prompt" type = "string" suppress_top = 0 suppress_bottom = 2 } # prompt connect_info = { label = "$lang_stats.field_labels.connect_info" log_field = "connect_info" type = "string" suppress_top = 0 suppress_bottom = 2 } # connect_info configuration_token = { label = "$lang_stats.field_labels.configuration_token" log_field = "configuration_token" type = "string" suppress_top = 0 suppress_bottom = 2 } # configuration_token tunnel_pvt_group_id = { label = "$lang_stats.field_labels.tunnel_pvt_group_id" log_field = "tunnel_pvt_group_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_pvt_group_id tunnel_assignment_id = { label = "$lang_stats.field_labels.tunnel_assignment_id" log_field = "tunnel_assignment_id" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_assignment_id tunnel_preference = { label = "$lang_stats.field_labels.tunnel_preference" log_field = "tunnel_preference" type = "string" suppress_top = 0 suppress_bottom = 2 } # tunnel_preference acct_interim_interval = { label = "$lang_stats.field_labels.acct_interim_interval" log_field = "acct_interim_interval" type = "string" suppress_top = 0 suppress_bottom = 2 } # acct_interim_interval ascend = { label = "$lang_stats.field_labels.ascend" log_field = "ascend" type = "string" suppress_top = 0 suppress_bottom = 2 } # ascend saved_radius_framed_route = { label = "$lang_stats.field_labels.saved_radius_framed_route" log_field = "saved_radius_framed_route" type = "string" suppress_top = 0 suppress_bottom = 2 } # saved_radius_framed_route client_ip_address = { label = "$lang_stats.field_labels.client_ip_address" log_field = "client_ip_address" type = "string" suppress_top = 0 suppress_bottom = 2 } # client_ip_address ms_ras_client_name = { label = "RAS Client Name" label = "$lang_stats.field_labels.ms_ras_client_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # ms_ras_client_name nas_manufacturer = { label = "$lang_stats.field_labels.nas_manufacturer" log_field = "nas_manufacturer" type = "string" suppress_top = 0 suppress_bottom = 2 } # nas_manufacturer ms_chap_error = { label = "$lang_stats.field_labels.ms_chap_error" log_field = "ms_chap_error" type = "string" suppress_top = 0 suppress_bottom = 2 } # ms_chap_error authentication_type = { label = "$lang_stats.field_labels.authentication_type" log_field = "authentication_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # authentication_type client_friendly_name = { label = "$lang_stats.field_labels.client_friendly_name" log_field = "client_friendly_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # client_friendly_name sam_account_name = { label = "$lang_stats.field_labels.sam_account_name" log_field = "sam_account_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # sam_account_name fully_qualified_user_name = { label = "$lang_stats.field_labels.fully_qualified_user_name" log_field = "fully_qualified_user_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # fully_qualified_user_name eap_friendly_name = { label = "$lang_stats.field_labels.eap_friendly_name" log_field = "eap_friendly_name" type = "string" suppress_top = 0 suppress_bottom = 2 } # eap_friendly_name packet_type = { label = "$lang_stats.field_labels.packet_type" log_field = "packet_type" type = "string" suppress_top = 0 suppress_bottom = 2 } # packet_type ip_source_ip = { label = "$lang_stats.field_labels.ip_source_ip" log_field = "ip_source_ip" type = "string" suppress_top = 0 suppress_bottom = 2 } # ip_source_ip ip_source_port = { label = "$lang_stats.field_labels.ip_source_port" log_field = "ip_source_port" type = "string" suppress_top = 0 suppress_bottom = 2 } # ip_source_port ip_destination_ip = { label = "$lang_stats.field_labels.ip_destination_ip" log_field = "ip_destination_ip" type = "string" suppress_top = 0 suppress_bottom = 2 } # ip_destination_ip ip_destination_port = { label = "$lang_stats.field_labels.ip_destination_port" log_field = "ip_destination_port" type = "string" suppress_top = 0 suppress_bottom = 2 } # ip_destination_port np_policy_name = "" } # database.fields database.numerical_fields = { events = { label = "$lang_stats.field_labels.events" default = true requires_log_field = false type = "int" display_format_type = "integer" entries_field = true } # events acct_input_octets = { label = "$lang_stats.field_labels.acct_input_octets" default = false requires_log_field = true log_field = "acct_input_octets" type = "float" display_format_type = "bandwidth" } # acct_input_octets acct_output_octets = { label = "$lang_stats.field_labels.acct_output_octets" default = false requires_log_field = true log_field = "acct_output_octets" type = "float" display_format_type = "bandwidth" } # acct_output_octets acct_session_time = { label = "$lang_stats.field_labels.acct_session_time" default = false requires_log_field = true type = "float" display_format_type = "duration_compact" } # acct_session_time } # database.numerical_fields log.filters = { mark_entry = { label = '$lang_admin.log_filters.mark_entry_label' comment = '$lang_admin.log_filters.mark_entry_comment' value = 'events = 1;' } # mark_entry } # log.filters create_profile_wizard_options = { date_time_tracking = true host_tracking = true # How the reports should be grouped in the report menu report_groups = { date_time_group = "" server = true service = true hostname = true domain_description = true location = true authenticated_user = true user_name = true nas_ip_address = true nas_port = true service_type = true framed_protocol = true framed_ip_address = true framed_ip_netmask = true framed_routing = true filter_id = true framed_mtu = true framed_compression = true login_ip_host = true login_service = true login_tcp_port = true reply_message = true callback_number = true callback_id = true framed_route = true framed_ipx_network = true class = true vendor_specific = true session_timeout = true idle_timeout = true termination_action = true called_station_id = true calling_station_id = true nas_identifier = true login_lat_service = true login_lat_node = true login_lat_group = true framed_appletalk_link = true framed_appletalk_network = true framed_appletalk_zone = true acct_status_type = true acct_delay_time = true acct_session_id = true acct_authentic = true acct_session_time = true acct_terminate_clause = true acct_multi_ssn_id = true acct_link_count = true event_timestamp = true nas_port_type = true port_limit = true login_lat_port = true tunnel_type = true tunnel_medium_type = true tunnel_client_endpt = true tunnel_server_endpt = true acct_tunnel_conn = true password_retry = true prompt = true connect_info = true configuration_token = true tunnel_pvt_group_id = true tunnel_assignment_id = true tunnel_preference = true acct_interim_interval = true ascend = true saved_radius_framed_route = true client_ip_address = true nas_manufacturer = true ms_chap_error = true authentication_type = true client_friendly_name = true sam_account_name = true fully_qualified_user_name = true eap_friendly_name = true packet_type = true ip_source_ip = true ip_source_port = true ip_destination_ip = true ip_destination_port = true } # report_groups } # create_profile_wizard_options not_supported = { sessions = true visitors = true pageviews = true } # not_supported } # ias