Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
468
Views
1
Helpful
2
Replies

Cannot export the collected logs for Agentless posture troubleshooting

rezaalikhani
VIP
VIP

‎07-28-2024 02:26 AM

Hi all;

For troubleshooting purposes, I have collected the logs for Agentless posture operation, as you can see below:

rezaalikhani_0-1722158739217.png

But when I click on the Export link, nothing happens. I have tested with several browsers and in the same browser, with several versions with the same result...

Can anybody reproduce this problem?

Thanks 

0 Helpful
2 Replies 2

marce1000
Hall of Fame
Hall of Fame

‎07-28-2024 04:47 AM

 

  - Check output from  show logging application ise-psc.log   (just after trying)

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

anthony-warren
Level 1
Level 1

‎03-07-2025 07:34 AM

I've experienced very similar.  ISE 3.1.0.518 P10.

For me, I was trying to do Agentless Posture flow troubleshooting and the export associated with an example mac address.

With Edge, the Downloads section reports "Couldn't download. Something went wrong."
With Firefox, a new Tab opens to the URL of https://<ISE-Node>/admin/rs/uiapi/agentless/troubleshooting/exportLog/<MAC>

And an error 400.

 

I've looked in ise-psc.log and can see some potential related messages.

 

2025-03-07 15:16:28,699 INFO   [AdeSyslogProcessor][] cpm.infrastructure.systemconfig.syslogproc.AdeSyslogContent -::::- Logging detail to aLogExternal :error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol) while SSL handshaking, Port = 443 SystemMsg : com.cisco.cpm.prrt.infrastructure.SystemMsg@7eb1a745 IpAddress : 172.25.100.10ISEServer <ISE-Node1>01
2025-03-07 15:16:28,699 INFO   [AdeSyslogProcessor][] cpm.infrastructure.systemconfig.syslogproc.AdeSyslogContent -::::- Logging detail to aLogExternal :error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher) while SSL handshaking, Port = 443 SystemMsg : com.cisco.cpm.prrt.infrastructure.SystemMsg@7eb1a745 IpAddress : 172.25.100.10ISEServer <ISE-Node1>01
2025-03-07 15:16:28,700 INFO   [AdeSyslogProcessor][] cpm.infrastructure.systemconfig.syslogproc.AdeSyslogContent -::::- Logging detail to aLogExternal :error:1420918C:SSL routines:tls_early_post_process_client_hello:version too low) while SSL handshaking, Port = 443 SystemMsg : com.cisco.cpm.prrt.infrastructure.SystemMsg@7eb1a745 IpAddress : 172.25.100.10ISEServer <ISE-Node1>01
2025-03-07 15:16:28,700 INFO   [AdeSyslogProcessor][] cpm.infrastructure.systemconfig.syslogproc.AdeSyslogContent -::::- Logging detail to aLogExternal :error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol) while SSL handshaking, Port = 443 SystemMsg : com.cisco.cpm.prrt.infrastructure.SystemMsg@7eb1a745 IpAddress : 172.25.100.10ISEServer <ISE-Node1>01
2025-03-07 15:16:29,150 ERROR  [admin-http-pool11][] cpm.admin.infra.utils.CsrfValidationFilter -::::- required token is missing from the request
2025-03-07 15:16:29,151 WARN   [admin-http-pool11][] cpm.admin.infra.utils.ErrorLogUtil -::::- SourceIP: 'xxx.100.192.164' DestinationIP: 'xxx.100.64.66' Destination: '<ISE-Node1>01.<domain.com>' Component: 'GUI' Protocol: 'https' Action: 'Request rejected' Results: 'failure' Username: '<username>' FreeForm Field: 'Invalid request'
2025-03-07 15:16:29,423 INFO   [SXPSessionDispatcherThread][] ise.sxp.sessionbinding.handler.SxpSessionBindingDataHandler -::::-

PERF_SXP_SESS_BINDING : start transmitting SXP session bindings data from the sxp node to the sxp engine. Current time in milliseconds is: 1741360589423


2025-03-07 15:16:29,428 INFO   [SXPSessionDispatcherThread][] ise.sxp.sessionbinding.handler.SxpSessionBindingDataHandler -::::-

PERF_SXP_SESS_BINDING : transmitted SXP session bindings data from the sxp node to the sxp engine. Total elapsed time to transmit 4 bindings is: 5 milliseconds.


2025-03-07 15:16:30,122 ERROR  [admin-http-pool14][] cpm.admin.infra.utils.CsrfValidationFilter -::::- required token is missing from the request
2025-03-07 15:16:30,123 WARN   [admin-http-pool14][] cpm.admin.infra.utils.ErrorLogUtil -::::- SourceIP: 'xxx.100.192.164' DestinationIP: 'xxx.100.64.66' Destination: '<ISE-Node1>01.<domain.com>' Component: 'GUI' Protocol: 'https' Action: 'Request rejected' Results: 'failure' Username: '<username>' FreeForm Field: 'Invalid request'
2025-03-07 15:16:30,373 INFO   [Psc-NodeStateMonitorImpl-MonitorJob-Thread][] api.services.persistance.dao.DistributionDAO -:::NodeStateMonitor:- Host Name: COR-S-ISE01, DB 'SEC_REPLICATIONSTATUS' = SYNC COMPLETED, Node Persona: SECONDARY, ReplicationStatus obj status: SYNC_COMPLETED
2025-03-07 15:16:30,401 INFO   [admin-http-pool8][] cpm.admin.infra.spring.ISEAdminControllerUtils -:<username>:::- mapping path found in global-forwards, forwarding to: /pages/jsonResponse.jsp
2025-03-07 15:16:30,421 INFO   [admin-http-pool14][] cpm.admin.infra.spring.ISEAdminControllerUtils -:<username>:::- mapping path found in global-forwards, forwarding to: /pages/jsonResponse.jsp
2025-03-07 15:16:30,425 INFO   [admin-http-pool12][] cpm.admin.infra.spring.ISEAdminControllerUtils -:<username>:::- mapping path found in global-forwards, forwarding to: /pages/jsonResponse.jsp
2025-03-07 15:16:30,460 INFO   [admin-http-pool10][] cpm.admin.infra.spring.ISEAdminControllerUtils -:<username>:::- mapping path found in global-forwards, forwarding to: /pages/jsonResponse.jsp
 
 
Any other ideas?
0 Helpful
Customers Also Viewed These Support Documents