topic Re: Monitor ISE Processes in Network Access Control

Monitor ISE Processes

servicesecurity — Fri, 21 Feb 2020 18:41:13 GMT

Hi,

I would like to monitor ISE 2.2 processes via SNMP.

I know that in the Admin Guide we can use SNMP traps for that - however it is not working so well.

I tried to bring down ISE processes with 'application stop ise' command. However I am not getting any SNMP trap saying that ISE processes is not in running state...

In addition, I enabled snmp-server on ISE and we are getting allot of processes when performing polling.

The list of processes are attached to the .txt file.

Which processes are relevant to monitor from that list, if I would like to monitor the ISE Application Server processes and all the processes that I can see with that command 'show application status ise'.

Reagrds,

Re: Monitor ISE Processes

Arne Bier — Mon, 11 Dec 2017 23:16:34 GMT

ISE only supports one SNMP trap, and it's in relation to disk space usage. Pretty sad I know. SNMP in ISE needs a bit more development.

Maybe there is better visibility using the REST API.

Re: Monitor ISE Processes

Marvin Rhoads — Wed, 13 Dec 2017 21:07:12 GMT

Original poster had cross posted and was answered in the communities.cisco.com thread.

https://communities.cisco.com/message/277112#277112

(partner access required)

The gist of it is as follows:

"The ISE processes are monitored by monit. When manually stopping ISE services from ISE admin CLI, it also stops the monit process so no trap is sent. When an ISE process got crashed or killed and not running for more than 5 minutes, a cron job runs every 5 minutes will generate the trap"

Re: Monitor ISE Processes

ajc — Wed, 13 Dec 2017 17:18:19 GMT

Hi Marvin,

I cannot access this link. I would like to take a look on the response. Could you please post it here?

thanks

Re: Monitor ISE Processes

Marvin Rhoads — Wed, 13 Dec 2017 21:08:26 GMT

@ajc

I updated my earlier reply to clarify. Thanks for pointing out the access issue.