topic Re: ISE 2.3P1 Splunk pxGrid Implementation in Network Access Control

ISE 2.3P1 Splunk pxGrid Implementation

scamarda — Tue, 09 Jan 2018 13:28:47 GMT

Is there a compatibility matrix for ISE and Splunk integration? I am running ISE 2.3p1 and Splunk 7.0.1 and cannot get the pxGrid connection to come up. The Splunk pxgremediate.log indicates that it cannot read the truststore. I have verified the password and the file are OK. I've worked with both CA certs and self-signed certs.

Thanks.

Sam

Re: ISE 2.3P1 Splunk pxGrid Implementation

hslai — Tue, 09 Jan 2018 17:01:11 GMT

I will forward this to our pxGrid SME.

Re: ISE 2.3P1 Splunk pxGrid Implementation

jeppich — Tue, 09 Jan 2018 18:43:03 GMT

Hey Hsing-Tsu,

I spoke with Sam off-line, there was an issue using external certificates. We were seeing error reading username and password in Splunk truststore, it turned out to be a certificate issue. Sam was also using an external CA server and pointed him to Deploying Certificates with Cisco pxGrid - Using an external Certificate Authority (CA) with updates to Cisco ISE 2.0/2.…

to re-create the certificates and jks files. All is good now.

Thanks,

John

Re: ISE 2.3P1 Splunk pxGrid Implementation

hslai — Tue, 09 Jan 2018 18:47:55 GMT

Thanks a lot.

Re: ISE 2.3P1 Splunk pxGrid Implementation

scamarda — Wed, 10 Jan 2018 00:05:59 GMT

Thanks for the help. Works like a champ.