topic Re: Monitoring the ISE Deployment in Network Access Control https://community.cisco.com/t5/network-access-control/monitoring-the-ise-deployment/m-p/3606141#M540546 <HTML><HEAD></HEAD><BODY><P>If you want the general system health, then add your remote syslog target to "System Statistics".</P><P></P><P>As you can see, the events are divided into categories and we may designate a syslog target receiving only a subset of categories. We usually want to keep the default severity and only temporarily set a category to higher for debugging purposes.</P></BODY></HTML> Thu, 11 Feb 2016 06:32:46 GMT hslai 2016-02-11T06:32:46Z Monitoring the ISE Deployment https://community.cisco.com/t5/network-access-control/monitoring-the-ise-deployment/m-p/3606140#M540545 <HTML><HEAD></HEAD><BODY><P style="font-size: 13.3333px;">Hi,</P><P style="font-size: 13.3333px;"></P><P style="font-size: 13.3333px;">Our customer recently had some problems some PSNs in their ISE 1.3 deployment and didn't realize for quite some time.</P><P style="font-size: 13.3333px;">They are now looking for the best way to monitor their deployment. I have not been able to find a full best practice around monitoring ISE deployments.</P><P style="font-size: 13.3333px;"></P><P style="font-size: 13.3333px;">Info I have found:</P><P style="font-size: 13.3333px;"><A href="http://pmbuwiki/Products/ISE/Technical/Design-Config/Monitoring#Appliance.c2.a0Monitoring" title="http://pmbuwiki/Products/ISE/Technical/Design-Config/Monitoring#Appliance.c2.a0Monitoring">http://pmbuwiki/Products/ISE/Technical/Design-Config/Monitoring#Appliance.c2.a0Monitoring</A></P><P style="font-size: 13.3333px;">which contains:</P><P style="font-size: 13.3333px;">- Syslog setup: How to configure, not what to configure.</P><P style="font-size: 13.3333px;">- SNMP MIBs: Some info on the appliance/VM resources, but nothing on the ISE services availability.</P><P style="font-size: 13.3333px;">- UCS/NAC appliance monitoring: Again looking at the appliance, but not the ISE services.</P><P style="font-size: 13.3333px;"></P><P style="font-size: 13.3333px;">Basically I am looking for an ideal monitoring configuration:</P><P style="font-size: 13.3333px;">We would configure a syslog server as remote logging target, but would to understand which Logging category to enable to send useful information about the status of the ISE deployment to the syslog server.</P><P style="font-size: 13.3333px;">Any recommendations which Logging Categories to enable?</P><P style="font-size: 13.3333px;"></P><P style="font-size: 13.3333px;">Secondly, is there a way to tune the Message Catalog to make sure some logs are sent to the syslog server?</P><P style="font-size: 13.3333px;">Some Messages which are interesting are considered Debug and are therefore not triggered when the general Logging Category is set to Warn or Info.</P><P style="font-size: 13.3333px;"></P><P style="font-size: 13.3333px;">Regards</P><P style="font-size: 13.3333px;">Gert</P></BODY></HTML> Mon, 08 Feb 2016 12:54:35 GMT https://community.cisco.com/t5/network-access-control/monitoring-the-ise-deployment/m-p/3606140#M540545 gtilburg 2016-02-08T12:54:35Z Re: Monitoring the ISE Deployment https://community.cisco.com/t5/network-access-control/monitoring-the-ise-deployment/m-p/3606141#M540546 <HTML><HEAD></HEAD><BODY><P>If you want the general system health, then add your remote syslog target to "System Statistics".</P><P></P><P>As you can see, the events are divided into categories and we may designate a syslog target receiving only a subset of categories. We usually want to keep the default severity and only temporarily set a category to higher for debugging purposes.</P></BODY></HTML> Thu, 11 Feb 2016 06:32:46 GMT https://community.cisco.com/t5/network-access-control/monitoring-the-ise-deployment/m-p/3606141#M540546 hslai 2016-02-11T06:32:46Z