Where can I find documentation on the syslog events for Rogue AP detection? We are trying to capture log events for spoofed SSIDs and export them to a central SIEM server.

[jgutierrez1]

Where can I find documentation on the syslog events for Rogue AP detection? We are trying to capture log events for spoofed SSIDs and export them to a central SIEM server.

[samantha_lynn]

I believe you'd want to look at the info level for syslog records of a rouge AP, but unfortunately we don't have documentation on syslog levels.