topic Re: Cisco ISE Monitoring API - How to get information from the session? in Network Access Control

Cisco ISE Monitoring API - How to get information from the session?

ShuningWu14393 — Mon, 16 Nov 2020 19:16:41 GMT

Hi,

We tried these two requests on Monitoring API to get the session list information, but could not get any records from the response (response is always empty):

https://<ISEhost>/admin/API/mnt/Session/ActiveList

https://<ISEhost>/admin/API/mnt/Session/AuthList/<parameteroptions>

Do we miss anything?

Thanks!

Re: Cisco ISE Monitoring API - How to get information from the session?

Damien Miller — Tue, 17 Nov 2020 05:03:18 GMT

First, and just to make sure, the call is run against the node(s) that is/are running the MNT persona. If the primary MNT results in no sessions being dumped out, then I would try it against the secondary MNT. If the secondary provides the sessions, then you might be running in to a bug with the primary's session table. If neither primary nor secondary provides sessions, then that's also something you would want to contact TAC on. A word of caution as well on this web API call, this is pretty resource intensive as the number of live sessions grows.

I just pulled these out of a node running 2.7 patch 2.

Re: Cisco ISE Monitoring API - How to get information from the session?

ShuningWu14393 — Tue, 17 Nov 2020 21:35:13 GMT

Thanks much for your reply! How could we check if the call is running against primary vs. secondary MNT? Do they have different API URLs?

Re: Cisco ISE Monitoring API - How to get information from the session?

Damien Miller — Tue, 17 Nov 2020 23:03:51 GMT

Yes, It's based on the hostname/IP/URL you make the browser call against. You can get the names / IP's for the MNT nodes from the deployment view.
https://<ise admin fqdn>/admin/#administration/administration_system/administration_system_deployment

Re: Cisco ISE Monitoring API - How to get information from the session?

ShuningWu14393 — Wed, 18 Nov 2020 00:50:57 GMT

Thanks again! Is there any API for the administration_system_deployment? Or do we need to check the deployment view under ISE UI?