topic ISE - Logging ansible APIs in Network Access Control

ISE - Logging ansible APIs

lanagna — Mon, 29 Jan 2024 05:29:54 GMT

Hi Team,

Looking for the ansible API for below configuration., Pls share the exact APIs

Syslog Config

From the Cisco ISE administration portal.
Navigate to Administration > System > Logging > Remote Logging Targets.
Click Add to add a new remote logging target.
In the Add Remote Logging Target window, choose the Facility Code (Code 5 )from the drop-down list.
Enter the Maximum Length of the remote log target messages. Valid values are from 200 through 1024 bytes.
Check the Include Alarms For this Target checkbox if you want to include alarms for this target.
Click Save to save the changes.

Re: ISE - Logging ansible APIs

Arne Bier — Mon, 29 Jan 2024 19:57:40 GMT

Great question @lanagna - before looking at the Ansible Collections, I couldn't even find how to do this natively in ISE 3.3 patch 1. The OpenAPI would seem the logical place to start. In the Swagger UI, the "System" section looks like it still needs a lot of work done.

ISE was never developed as an "API first" type of application - API's are slowly being bolted onto ISE.

And IMHO the API stuff in ISE is a mess - there is ERS and OpenAPI - you have to go looking at two different places for API calls.

Yes sure, the API Gateway feature means you have a common entry point, but the API documentation is in two different places.

I hope they can standardise on a common API (e.g. OpenAPI) - but if so, hopefully it won't take another 5 years.

Re: ISE - Logging ansible APIs

Greg Gibbs — Mon, 29 Jan 2024 23:28:47 GMT

In addition to what @Arne Bier stated, it's important to know that there is currently not feature parity between the GUI and API. There

As the Ansible modules leverage the APIs, if something cannot be done by API, it cannot be done using Ansible.

The best place to start when looking to configure something in ISE via Ansible/API is to check the API documentation at https://cs.co/ise-api first to see if an API endpoint exists.

There are currently no APIs to configure the settings you reference.

Re: ISE - Logging ansible APIs

thomas — Mon, 29 Jan 2024 23:47:21 GMT

There are no APIs for ISE Syslog configuration and therefore no Ansible modules for it either.

Please submit your request to https://cs.co/ise-wish.