topic Re: In Cisco ISE, Live logs appears but In Endpoint that stopped appea in Network Access Control

In Cisco ISE, Live logs appears but In Endpoint that stopped appearing

pgore — Sun, 21 Jan 2024 09:03:46 GMT

We are in ISE 3.2.0.542 patch 3. Suddenly when i added new switch and deployed ISE with monitor mode.

Live logs shows up device but Endpoint profile shows blank in it

and If i go to context visibility > endpoints. These endpoints arent present there. These wasnt the case few days back when any endpoint once configured with ISE appears in live logs first and then same

Re: In Cisco ISE, Live logs appears but In Endpoint that stopped appea

balaji.bandi — Sun, 21 Jan 2024 13:23:00 GMT

check you may be effecting with Bug : (suggest to raise an TAC Case ?)

https://community.cisco.com/t5/artigos-seguran%C3%A7a/ise-hot-patch-para-vers%C3%A3o-3-2-p4-para-delays-no-live-logs/ta-p/4983092

Re: In Cisco ISE, Live logs appears but In Endpoint that stopped appea

MHM Cisco World — Sun, 21 Jan 2024 13:25:32 GMT

Can you share screenshots

MHM

Re: In Cisco ISE, Live logs appears but In Endpoint that stopped appea

Aref Alsouqi — Sun, 21 Jan 2024 14:48:58 GMT

Are those sessions you see in live logs failed sessions? Endpoint profiles would not show up for the failed sessions. If that is not the case probably I would try to reset the context visibility database. You can do so by issuing the command "application configure ise" and then select the number of the "Reset Context Visibility" which should be number 20.

Re: In Cisco ISE, Live logs appears but In Endpoint that stopped appea

pgore — Mon, 22 Jan 2024 14:30:50 GMT

We are in ISE 3.2.0.542 patch 3. Suddenly when i added new switch and deployed ISE with monitor mode.

Live logs shows up device but Endpoint profile shows blank in it. ideally first it used to profile something atleast based on mac OUI or start digits or unknow now its completeely blank

we even tried context synch by no 21 and also later reloaded the Admin node but didnt solve issue

And there is no delay in live logs they appear immediately

And irrespective if auth fail or pass the end point gets registered and appears before now it doesnt ...

So still looking for solution..tried reload of Admin node didnt fix that as well

Re: In Cisco ISE, Live logs appears but In Endpoint that stopped appea

Aref Alsouqi — Mon, 22 Jan 2024 16:00:37 GMT

Can you please try to remove an endpoint manually and see if that makes any difference? if not, I would recommend raising a TAC for this.

Re: In Cisco ISE, Live logs appears but In Endpoint that stopped appea

cghaderpour — Tue, 25 Jun 2024 13:16:14 GMT

this worked for me!

TY Aref

Re: In Cisco ISE, Live logs appears but In Endpoint that stopped appea

roberto brito — Fri, 18 Oct 2024 22:38:02 GMT

Were you able to get this resolved? If so, what did you do?

Re: In Cisco ISE, Live logs appears but In Endpoint that stopped appea

Leopardi — Fri, 23 May 2025 07:32:31 GMT

Good morning,
even with a restart of the context visibility the error and missing endpoints remains.
ISE 3.3 patch 4.5