Hello,
a user’s notebook was stolen. We believe the thief is still using it at our campsite.
As you know, all registered MAC and IP addresses appear live in the log.
Can I specify the MAC address of the stolen notebook with my own color?
Then I could find it faster in the log when the thief logs in.
Where to find syslog? There is one in DUDE. Can be used with filters. DUDE stores result in LOG in memory. Could be stored in separate file etc.
DUDE collects all logs from all AP’s for me in one place.
.
dudelog action could be type email in your case.