Refer to the official documentation below to configure log forwarding from Cisco Wireless LAN Controller.
The Scope application supports ingestion of Cisco Wireless LAN Controller logs in the Syslog format.
<13> 10.0.224.12 2024-02-28T14:03:10-05:00 10.0.224.12 5508-WLC-02: *webauthRedirect: Feb 28 14:03:10.859: %EMWEB-6-PARSE_ERROR: webauth_redirect.c:2222 parser exited. client mac= c:8b:7d:54:24:fb bytes parsed = 0
<187>26709: Jul 10 11:31:20.230: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host 10.20.1.19
<188>928494: 928492: Aug 21 03:26:47: %CDP-4-DUPLEX_MISMATCH: duplex mismatch discovered on redacted1/0/28 (not half duplex), with 00:0e:44:02:67:4f eth0 (half duplex).
<13> 10.21.254.4 2025-12-09T09:56:32-05:00 10.21.254.4 %ILPOWER-5-IEEE_DISCONNECT: Interface redacted/0/43: PD removed
<190>: 2026 Mar 19 09:48:58 EDT: %SYSMGR-6-SRVSTATE_CHANGED: State for service """"xmlma"""" changed from SRV_STATE_HANDSHAKED to SRV_STATE_WAIT_CFG_ACTION_RSP in vdc 1.
<134>CRIWLC5520: *haSSOServiceTask4: Apr 03 17:16:21.141: %LOG-6-Q_IND: [SS]apf_ms.c:8996 Username entry (xxxxxx) with length (6) created for mobile 16:bc:5a:d1:df:5a