This squence of ssh commands should really do the job to change the log_level:so i rebooted the 86U after explicitly setting the log level = 5 (the level was already set to 5) but WLCEVENTD log messages (Authorizations, Disassociations and ReAssociations) are still filling up the system log. the involved MAC addresses are all associated with iPhones.
anyway, @Butterfly Bones posted the explanation above, thanks.
- nvram set log_level=5
- nvram commit
- reboot
No matter you hide or show them, the WLCEVENTD events should be explainable: usually devices that get powered down and powered up or devices like phones that you take away from home and bring back in.
In the recent past I have also seen WLCEVENTD events that seems to be related to devices trying to connect but fail (people walking by on the street with a phone that tries to connect?).
For the WLCEVENTD events it also doesn't matter if an iPhone (or other device) has a Private MAC address, the only difference it causes is that you might not immediately recognize the MAC address as one being from a known device, the DHCP Leases overview will give a clue (assuming you recognize the Host name).