how to send log from post-auth with Freeradius?

Question

I want to send message to remote syslog in post-auth section. Simple string with

"'%{User-Name}', '%{reply:Packet-Type}', '%{Calling-Station-Id}'"

How do it with FreeRADIUS 3 ?

Or..

How to split loggs by facility or priority?

Answer 1

Using linelog

linelog log_postauth {
        filename = syslog
        syslog_facility = authpriv
        syslog_severity = info
        format = "ACCEPTED: %{User-Name} %{control:Tmp-String-0}, %{control:Tmp-String-1}, nas address: %{request:Called-Station-Id}, remote address: %{request:Calling-Station-Id}"
}

linelog log_postreject {
        filename = syslog
        syslog_facility = authpriv
        syslog_severity = warning
        format = "REJECTED: %{User-Name} %{control:Tmp-String-0}, %{control:Tmp-String-1}, nas address: %{request:Called-Station-Id}, remote address: %{request:Calling-Station-Id}"
}

And in server

post-auth {

    Post-Auth-Type ACCEPT {
        log_postauth
    }

    Post-Auth-Type REJECT {
        log_postreject
    }

}

Then sending it with rsyslog service

if  $syslogfacility-text == 'authpriv'
then {
    action(type="omfwd" target="10.254.144.141" protocol="udp" port="514")
}