topic Re: Unable to view setting in CLI which is configured via GUI in Network Access Control

Unable to view setting in CLI which is configured via GUI

sumedh0991 — Thu, 27 Mar 2025 07:34:25 GMT

Hello

Recently, I have configured a few settings on Cisco ISE NDM Version: 3.0.0.458.

Configuration is present on the GUI, but it is not reflected CLI.

Administration >> System >> Logging >> Local Log Settings >> Local Log Storage Period.

However, I am not able to view this setting via CLI.

Please share any solution or workaround to view it

Re: Unable to view setting in CLI which is configured via GUI

ahollifield — Thu, 27 Mar 2025 12:37:18 GMT

You don't view this in CLI. There is no CLI output for almost all ISE features.

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/identity-service-engine-software-3-0.html

Re: Unable to view setting in CLI which is configured via GUI

sumedh0991 — Thu, 03 Apr 2025 08:53:43 GMT

Thanks @ahollifield for your response.

Is there an API or export configuration mechanism that I can use to get the configuration in a readable form, which has been done via the GUI?

Re: Unable to view setting in CLI which is configured via GUI

ahollifield — Thu, 03 Apr 2025 13:17:52 GMT

You can use API or export a backup file. Neither is human readable.

Re: Unable to view setting in CLI which is configured via GUI

sumedh0991 — Mon, 30 Jun 2025 12:26:54 GMT

@ahollifield

Which specific API can I use for the following UI setting?

Setting name: Local Log Storage period

Also, please share the API example

Re: Unable to view setting in CLI which is configured via GUI

ahollifield — Mon, 30 Jun 2025 13:10:58 GMT

cs.co/ise-berg#api

Re: Unable to view setting in CLI which is configured via GUI

sumedh0991 — Tue, 01 Jul 2025 05:25:18 GMT

@ahollifield

Thank you for your reply.

But, I was not able to find this particular setting in ERS, MnT, pxGrid and OpenAPI endpoints
Please point me to specific API endpoints which can be used to fetch this particular setting

Re: Unable to view setting in CLI which is configured via GUI

saurabh-havelikar — Tue, 01 Jul 2025 16:34:49 GMT

Hi @ahollifield

I have the same query as @sumedh0991

Many such configuration settings on the ISE GUI are not exposed via above mentioned API endpoints.

Re: Unable to view setting in CLI which is configured via GUI

ahollifield — Tue, 01 Jul 2025 16:46:03 GMT

Correct, and not all GUI settings have API support. I have no idea if logging retention time is configurable via API.

https://cs.co/ise-berg#api

Re: Unable to view setting in CLI which is configured via GUI

saurabh-havelikar — Thu, 03 Jul 2025 04:37:05 GMT

@ahollifield @Greg Gibbs
I also have some other settings in Cisco ISE GUI example Administration >> System >> Admin Access >> Authentication >> Lock/Suspend Settings

Could you help me with the exact API endpoints for such GUI settings ?
I was not able to find this particular setting in ERS, MnT, pxGrid and OpenAPI endpoints.

Re: Unable to view setting in CLI which is configured via GUI

Greg Gibbs — Thu, 03 Jul 2025 06:23:49 GMT

There are no API endpoints for that configuration. As stated before, there is currently no feature parity between what can be configured from the GUI and what can be done via API.

If you do not find it in the API documentation (https://cs.co/ise-api), then it probably does not exist.