https://community.cisco.com/t5/network-access-control/ise-pic-syslog-provider/m-p/3796870#M485385 <P>I am new to ISE-PIC. I am trying to use the SYSLOG provider function of ISE-PIC to capture username to IP mappings. I have 2 providers set up. 1 is a custom template and the other is the built in F5 VPN template. I see the log messages making it to my ISE-PIC demo server using the tcpdump feature in the Troubleshooting section. I never see anything in "Live Sessions". Everything looks good in the "Test Template" when I paste in a sample log message. All of my providers have an up status. I have added the custom header that pulls out the providers IP. I'm not sure what I'm missing. Is there anything else I need to do to get ISE-PIC to accept the data that I'm sending? This is running the Eval license on version 2.4. Any insight would be appreciated.</P> Thu, 07 Feb 2019 15:02:35 GMT eaaronseth 2019-02-07T15:02:35Z https://community.cisco.com/t5/network-access-control/ise-pic-syslog-provider/m-p/3796870#M485385 <P>I am new to ISE-PIC. I am trying to use the SYSLOG provider function of ISE-PIC to capture username to IP mappings. I have 2 providers set up. 1 is a custom template and the other is the built in F5 VPN template. I see the log messages making it to my ISE-PIC demo server using the tcpdump feature in the Troubleshooting section. I never see anything in "Live Sessions". Everything looks good in the "Test Template" when I paste in a sample log message. All of my providers have an up status. I have added the custom header that pulls out the providers IP. I'm not sure what I'm missing. Is there anything else I need to do to get ISE-PIC to accept the data that I'm sending? This is running the Eval license on version 2.4. Any insight would be appreciated.</P> Thu, 07 Feb 2019 15:02:35 GMT https://community.cisco.com/t5/network-access-control/ise-pic-syslog-provider/m-p/3796870#M485385 eaaronseth 2019-02-07T15:02:35Z https://community.cisco.com/t5/network-access-control/ise-pic-syslog-provider/m-p/3797030#M485387 Does the F5 VPN template work for you without the custom header? One thing to check is that DNS is set up correctly. Even reverse lookup. Incorrectly configured DNS records (or the lack of them) can cause issues.<BR /><BR />Regards,<BR />-Tim Thu, 07 Feb 2019 17:11:11 GMT https://community.cisco.com/t5/network-access-control/ise-pic-syslog-provider/m-p/3797030#M485387 Timothy Abbott 2019-02-07T17:11:11Z