topic ISE 1.1.1 Collection Filter in Network Access Control

ISE 1.1.1 Collection Filter

patrick.kofler — Mon, 11 Mar 2019 02:28:41 GMT

Hi there,

I wanted to ask if there is a collection filter in the ISE similar to ACS 5.3, where I can filter out unwanted syslogs.

Regards,

Patrick

ISE 1.1.1 Collection Filter

Venkatesh Attuluri — Sat, 11 May 2013 11:04:07 GMT

Try these steps

Step 1 From the ISE Administration Interface, choose Administration > System > Logging > Remote Logging Targets.

The Remote Logging Targets page appears with a list of existing logging targets.

Step 2 Click Filter and choose one of the following options:

•Quick Filter

•Advanced Filter

To perform a quick filter, enter search criteria in one or more of the following attribute fields:

•Name

•IP Address

•Type

•Description

To perform an Advance filter, create a matching rule by performing the following:

•In the Filter drop-down list, select one of the following options:

–Name

–IP Address

–Type

–Description

•In the second drop-down list, select one of the following options:

–Contains

–Does not contain

–Does not equal

–Ends with

–Is empty

–Is exactly (or equals)

–Is not empty

–Starts with

•In the text box, enter your desired search value.

•Click Go to launch the filter process, or click plus to add additional search criteria.

•Click Clear Filter to reset the filter process.

The desired remote logging targets are displayed.

ISE 1.1.1 Collection Filter

Jatin Katyal — Sat, 11 May 2013 15:23:12 GMT

The "ACS equivalent: collection filter" is not supported yet. This is planned for ISE 1.2

Jatin Katyal

- Do rate helpful posts -

Understanding Collection Filters

You can create collection filters that allow you to filter and drop syslog
events that are not used for monitoring or troubleshooting purposes. When
you configure collection filters, the Monitoring & Report Viewer does not
record these events in the database and saves much needed disk space."