Events

Select the host name of an AP or a switch from the Devices table, and then go to Monitor > Monitoring > Events. The Device Details panel displays the following information:

ExtremeCloud‌ IQ records events that occur in the network, and displays the events for the selected device in this window. The table data updates hourly. You can customize the time period using the Time Range controls:

• To show events for the current day, select Day and then select the number of hours: 1, 2, 4, 8, or 24.
• To show events for the week, select Week and then select the number of days: 1, 2, or 7.

There is an Events tab and a Configuration Events tab above the table. Select Configuration Events to show only changes to the device configuration, either from inside a network policy, or at the device level.

Use the predictive search field to search for an event by description. Use the column picker to customize the categories displayed in the table. By default, Timestamp, Severity, Category, and Description columns are displayed. Optional columns include Host Name, Device MAC, and Client MAC.

Select a Severity level from the list to filter the table. To customize the display, select the column headings. For example, if you want to organize the content by host name, select the Host Name heading.

Each entry includes the following elements:

• Timestamp: Indicates the time (in the month/day and time-of-day format) that the alarm or event occurred.
• Severity: Indicates the severity of the an alarm or event: Major, Info, or Clear.
• Category: Indicates the issue category that triggered the alarm or event. Available categories are CAPWAP, channel power, state change, client connection down, client connection change, static route ping protection, and DHCP rogue MAC detection.
• Description: Describes the context of an alarm or an event.
• Host Name: The host name of the configured device on which the event occurred.
• Device MAC: The MAC address of the device that reported the alarm or event.
• Client MAC: The MAC address of the client that reported the alarm or event.

To copy the information pertaining to an individual log, hover over the text in the Description column to display the complete description in a text box. Select the text, right-click, and then select Copy.

You can download table data as a CSV file.