topic Re: TACACS functionality in ISE - Suppress logging info? in Network Access Control

TACACS functionality in ISE - Suppress logging info?

sereagan@cisco.com — Fri, 09 Aug 2019 13:49:14 GMT

Are there any plans to include the ability to suppress logging info on TACACS authentications? The suppression option has always been available for radius authentications in ACS. I would like to suppress the logging for certain IDs connecting via TACACS." Is this on the roadmap, or a config option I'm not aware of?

Thanks

Re: TACACS functionality in ISE - Suppress logging info?

Damien Miller — Fri, 09 Aug 2019 15:51:18 GMT

I could also benefit from this functionality.

That and being able to filter in the TACACS live logs by ip and not just "ipv4 or ipv6", most useless filter.

Re: TACACS functionality in ISE - Suppress logging info?

Arne Bier — Wed, 14 Aug 2019 04:30:45 GMT

I'll second that. It works really well for RADIUS LiveLogs - without it, we'd have a real mess. TACACS logs end up very noisy due to regular Prime and/or DNA Center polling.