https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197700#M591936 <P>I use Microsoft Authentication for MFA</P> Mon, 23 Sep 2024 15:14:41 GMT kentwirianata 2024-09-23T15:14:41Z https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5196729#M591897 <P>Hello.<BR />I'm new on ISE, I want to find the logs for the last 30 days for all user that failed to connect to VPN with root cause 'wrong password', also the result of comparission between success and failed authentication that showed in Circle diagram if possible. anyone can guide me?<BR /><BR /><BR /></P> Fri, 20 Sep 2024 07:31:18 GMT https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5196729#M591897 kentwirianata 2024-09-20T07:31:18Z https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5196823#M591898 <P>Try reports - Operation --&gt; reports and select range of and generate reports.</P> <P>what version of ISE, 3.X have good features, older one you may struggle but you can get best of it.</P> Fri, 20 Sep 2024 10:58:33 GMT https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5196823#M591898 balaji.bandi 2024-09-20T10:58:33Z https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197564#M591930 <P>Yeah the Reports section or Log Analytics in ISE 3.2+.&nbsp; Or external syslog reporting to something like Splunk.</P> Mon, 23 Sep 2024 12:02:33 GMT https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197564#M591930 ahollifield 2024-09-23T12:02:33Z https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197669#M591933 <P>Thank you for your reply!!!&nbsp;</P> <P>I'm still confuse, where's the filter to find specific value I want like:</P> <P>Authentication Policy: VPN</P> <P>Root cause: Wrong password</P> <P>&nbsp;</P> Mon, 23 Sep 2024 14:31:43 GMT https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197669#M591933 kentwirianata 2024-09-23T14:31:43Z https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197683#M591934 <P>Are you use ftd with fmc for vpn ?</P> <P>MHM</P> Mon, 23 Sep 2024 14:52:18 GMT https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197683#M591934 MHM Cisco World 2024-09-23T14:52:18Z https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197684#M591935 <P>Your MFA solution/IDP would be the best place to view this information.&nbsp; What is the multi-factor authentication provider in this environment?</P> Mon, 23 Sep 2024 14:53:36 GMT https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197684#M591935 ahollifield 2024-09-23T14:53:36Z https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197700#M591936 <P>I use Microsoft Authentication for MFA</P> Mon, 23 Sep 2024 15:14:41 GMT https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197700#M591936 kentwirianata 2024-09-23T15:14:41Z https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197743#M591937 <P>How is NPS integrated with ISE?&nbsp; Token Server?&nbsp; I would consider checking both the ISE reports section as&nbsp;<a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/286878">@balaji.bandi</a>&nbsp; said and the NPS logs as well.</P> Mon, 23 Sep 2024 16:57:40 GMT https://community.cisco.com/t5/network-access-control/find-specific-logs-in-ise-for-the-last-30-days/m-p/5197743#M591937 ahollifield 2024-09-23T16:57:40Z