Wireless Access Point
Configuring the Wireless AP 195
e. Email Syslog SMTP Recipient Addresses: Specify the entire email 
address of the recipient of the email notification. You may specify 
additional recipients by separating the email addresses with 
semicolons (;).
7. Station Formatting: If you are sending event information to a Splunk 
server, select Key/Value to send data in Splunk’s expected format, 
otherwise leave this at the default value of Standard. See “About Using 
Splunk for Xirrus APs” on page 196. 
8. Station URL Logging: When enabled, Syslog messages are sent for each 
URL that each station visits. Only HTTP destinations (port 80) are logged; 
HTTPS destinations (port 443) are not logged. All URLs in a domain are 
logged, so for example, if an HTTP request to yahoo.com generates 
requests to 57 other URLs, all are logged. Furthermore, each visit to the 
same URL generates an additional log message. No deep packet 
inspection is performed by the URL logging, so no Application Control 
information is included in the Syslog message. 
The following information is included in the syslog message: 
• Date / Time 
• Source Device MAC and IP address
• Destination Port 
• Destination Site address (e.g., 20.20.20.1)
• The specific URL (e.g., http://20.20.20.1.24/online/images/
img2.jpg) 
Station URL Logging is disabled by default. 
9. Syslog Levels: For each of the Syslog destinations, choose your preferred 
level of Syslog reporting from the pull-down list. Messages with 
criticality at the selected level and above will be shown. The default level 
varies depending on the destination. 
a. Console Logging: For messages to be echoed to the console, the 
default level is Critical and more serious. This prevents large 
numbers of non-critical messages from being displayed on the