topic Re: Monitoring Cisco ISE using Elastic in Network Access Control

Monitoring Cisco ISE using Elastic

VinnyR — Fri, 21 Feb 2020 02:41:04 GMT

Hi Guys,

Has anyone here used Elastic/PacketBeat for any sort of ISE monitoring.

We want to expand and enhance our visibilty of ISE (802.1x Auth logs, performance analytics of auths etc, possible security events and monitoring the actual nodes and processes).

I've been going through the link below and it has been helpful, but I wanted to check if anyone else on here has used Elastic (or something similar) for monitoring.

https://community.cisco.com/t5/network-access-control/ise-monitoring-best-practice/td-p/3604198

TIA.

Re: Monitoring Cisco ISE using Elastic

balaji.bandi — Fri, 21 Feb 2020 07:13:52 GMT

Good Post.

I use many other purposes to get analytics using elastic search. (not tried ISE), but ISE supports REST API, so I am sure there is a way to extract the information and feedback to elastic to JSON dashboard.

Re: Monitoring Cisco ISE using Elastic

hslai — Sat, 22 Feb 2020 01:47:52 GMT

Splunk for Cisco Identity Services (ISE) is a popular choice.