Api to fetch Radius Accounting logs for last 30 days/Last month

[jagritibhardwaj471]

Using the Api for Authenticated users list :

    https://{ISE-MNT}/admin/API/mnt/Session/AuthList/{START_TIME}/{END_TIME}

I am able to fetch data of active sessions that are connected throughout the time period of 30 days whereas I also want to fetch data of users which were on and off connected. Is there any API which can help me fetch the data of both type of users of ise radius accounting that too data of last 30 days?

[thomas · Accepted solution]

There are no ISE REST APIs for getting historical RADIUS Accounting logs or session details - only active sessions as you have shown.

Alternatively, there is the ISE DataConnect ODBC interface where you may query any data in the ISE database using SQL. This will be your best option for historical data. Learn about it at

▷ Next Generation ISE Telemetry, Monitoring, and Custom Reporting Part 2 2023-03-02

08:10 Data Connect (ISE 3.2 and later)
10:52 Data Connect Deployment Scenarios
12:56 Using Data Connect
14:12 - Enable Data Connect (GUI)
16:38 - Enable Data Connect (API)
17:16 - Repository for Examples: https://github.com/EmmanuelCano/DataConnect/
17:49 - Certificate Export / Import
19:48 - Monitoring Alarms, Reports, and Log (ise-psc.log)
21:11 Demos Overview
22:40 Demo: Enable Data Connect : GUI and Python REST API Script
24:43 Demo: Verify Change Configuration Audit Report
25:38 Demo: Data Connect Certificate Export and Import for Java Keystore (for JDBC)
27:06 Demo: Data Connect with DB Visualizer
29:36 Data Connect Views (read-only)
31:27 Demo: Filter ISE LiveLogs by NAD IP SQL queries

If this does not work for you, submit any feature requests with specific details and examples @ https://cs.co/ise-wish

[jagritibhardwaj471]

Thanks a lot for this solution. This was really helpful, although as i have seen on cisco's site  , the Data Connect feature is supported from Cisco ISE release 3.2, but we are currently using  2.7 . Is there a chance that this data connect feature might work with my current version of Cisco-Ise ?

[Greg Gibbs · Accepted solution]

No, the Data Connect feature will not work for ISE 2.7. That version is past the End of Software Maintenance, so there is no more development expected on that software after that point.

[jagritibhardwaj471]

Is there any other way to fetch historic radius accounting logs using an Api in ISE 2.7 release?

[jagritibhardwaj471]

If i am upgrading my current version 2.7 to the latest version 3.2 and enabling data connect feature will I be able to fetch the last 90 days radius accounting logs?  

Just to be clear I want to be clear of two things :

1- This feature from the day it is enabled will fetch the last 90 days radius accounting logs?

2- Will the upgradation of ise from 2.7 to 3.2 hamper the whole process or anything specific I should keep in mind before upgradation? Do provide the link for the main changes in 3.2 version of ise.

[jagritibhardwaj471]

If i am upgrading my current version 2.7 to the latest version 3.2 and enabling data connect feature will I be able to fetch the last 90 days radius accounting logs?  

Just to be clear I want to be clear of two things :

1- This feature from the day it is enabled will fetch the last 90 days radius accounting logs?

2- Will the upgradation of ise from 2.7 to 3.2 hamper the whole process or anything specific I should keep in mind before upgradation? Do provide the link for the main changes in 3.2 version of ise.

[jagritibhardwaj471]

Hey , Thomas.

I am using the following API to fetch the authentication list of active sessions from Cisco ISE:

https://<ISEhost>/admin/API/mnt/Session/AuthList/starttime/endtime.

Although i want to fetch some other fields that are available in radius live logs , when we see radius live logs on the UI. Is there any way or any API's i can use to fetch these fields as well ?

The fields are :-

• NAS Port
• NAS IP
• NAS Type
• Location
• Network Device Details
• Authorization Profile
• Reason for Non-Compliance (if the posture status is Non-Compliant)

[jagritibhardwaj471]

Hey, i am facing an error while trying to connect to ise db after enabling the data connect feature . 

The code is:

package main

import (

    "database/sql"

    "fmt"

    "log"

    _ "github.com/sijms/go-ora/v2" // Oracle DB driver

)

func main() {

    // Define the connection string for Oracle with SSL/TCP

    dsn := `dataconnect/password@tcps(1.1.1.1:2484)/cpm10?ssl=true&ssl_cert=<path_to_cert>`

    // Open a database connection using the go-ora driver

    db, err := sql.Open("oracle", dsn)

    if err != nil {

        log.Fatalf("Failed to open connection: %v", err)

    }

    defer db.Close()

    // Try to ping the database to check connectivity

    err = db.Ping()

    if err != nil {

        log.Fatalf("Failed to ping database: %v", err)

    } else {

        fmt.Println("Successfully connected to the Cisco ISE Database!")

    }

    // Sample query: List Network Device Groups

    rows, err := db.Query("SELECT * FROM NETWORK_DEVICE_GROUPS")

    if err != nil {

        log.Fatalf("Error executing query: %v", err)

    }

    defer rows.Close()

    // Print query results

    fmt.Println("\nList of Network Device Groups:")

    for rows.Next() {

        var id, name, status string

        err := rows.Scan(&id, &name, &status)

        if err != nil {

            log.Fatalf("Error scanning row: %v", err)

        }

        fmt.Printf("ID: %s, Name: %s, Status: %s\n", id, name, status)

    }

    if err := rows.Err(); err != nil {

        log.Fatalf("Row iteration error: %v", err)

    }

}

the error i am facing is :  
2024/12/24 15:11:16 Failed to ping database: missing port in address