topic Re: How can see Log more than 30 day In Cisco ISE 2.4 in Network Access Control

How can see Log more than 30 day In Cisco ISE 2.4

jewfcb001 — Fri, 10 Jan 2020 03:45:34 GMT

Hi Everyone .

I would like to know How can i see log in Cisco ISE more than 30 days ?

ISE Version

Version : 2.4.0.357

Please see picture attached

Re: How can see Log more than 30 day In Cisco ISE 2.4

Arne Bier — Fri, 10 Jan 2020 03:59:33 GMT

Hi @jewfcb001

You need to use the Operations -> Reports menu option.

The key thing is that you need to click on the filter and choose Advanced

And then choose the custom date range

Re: How can see Log more than 30 day In Cisco ISE 2.4

jewfcb001 — Fri, 10 Jan 2020 05:26:22 GMT

@Arne

Thank you for your information.

Re: How can see Log more than 30 day In Cisco ISE 2.4

Damien Miller — Fri, 10 Jan 2020 06:03:47 GMT

Adding to Arne's date ranges, and assuming you were not already aware, ISE only maintains up to 30 days by default. You would have to adjust the data retention period as well. From that point on, ISE will attempt to maintain the number of days specified, but if space runs low, it will begin to aggressively clean up. So adjust with caution.

Re: How can see Log more than 30 day In Cisco ISE 2.4

jewfcb001 — Fri, 10 Jan 2020 06:14:20 GMT

@Damien
Thank you for additional information . I have a small question . Data Purge will retention auto or not ? If disk space runs low .

Re: How can see Log more than 30 day In Cisco ISE 2.4

Damien Miller — Fri, 10 Jan 2020 06:58:50 GMT

It will begin to auto purge when it hits the 80% mark if I remember correctly. But it's best to monitor it if you are adjusting the data retention period and keep it below that.