ISE logs

erameh — Tue, 12 Apr 2016 12:32:59 GMT

Hello team,

Please i need few clarfications on the 2 points below related to ISE

Where are account creation logs accessible? Ex: I create an Admin user in ISE. I want to go back to the logs and check when I created this user. Would this be via CLI?
If I export ISE logs externally, to a SIEM for example, can I re-import that data later to run the built-in ISE reports?

Thanks

Re: ISE logs

Timothy Abbott — Tue, 12 Apr 2016 13:17:23 GMT

Eliane,

You can run the Change Configuration Audit report to learn when an admin account was created in the system and be who. Unfortunately, you can't import logs into the system but you shouldn't need to. If you are logging externally, ISE still keeps those logs.

Regards,

-Tim

topic ISE logs in Network Access Control

ISE logs

Re: ISE logs