cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
441
Views
0
Helpful
1
Replies

any tricks to get ONLY LIVE logs with no repeated failure reasons (when filter a particular endpoint mac address)

getaway51
Level 2
Level 2

Hi,

 

It seems tht ISE live logs display too many logs (every 10s) when i filter a particular mac address. Is there any way to get only the LIVE logs with no repeated failure reasons so tht I see only logs when there is status change like fail->pass or pass->fail? 

1 Reply 1

RicardoDiaz
Cisco Employee
Cisco Employee

Hi,

 

Have you tried checking the current suppression settings ??

 

Administration > System > Settings > Protocols > RADIUS > Suppression & Reports