Hi,
I use this configuration to log sessions to a remote syslog server:
/system logging
add action=remote topics=firewall
/system logging action
set 3 remote=10.0.0.1
I obtained this:
srcnat: in:(none) out:wan, src-mac 1c:87:2c:b4:4d:e2, proto TCP (SYN), 10.0.0.253:51247->64.4.54.99:443, len 60,1,10.20.0.221,5,20160509122220,20160509122220,1,device@hotspot.ap,1c:87:2c:b4:4d:e2,TCP,10.0.0.253,51247,64.4.54.99,443
I’d like to log authenticated username on the same line, too.
Is it possible?
I don’t use local Mikrotik users, but external user database, through Radius server.
Thank you very much!