cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
433
Views
0
Helpful
1
Replies

Cisco ISE 2.3 Patch 5 - Collection Filter apply to specific syslog server

pgiouvanellis
Level 1
Level 1

Hello ,

 

I would like to ask for a specific deployment on logging to Cisco ISE .

 

I want to create a collection filter that will filter specific usernames and i want to send these logs only to specific syslog server .

 

I am able to create the collection filter but how i can apply this filter only to a specific log server and not to all ? 

 

Thank You ,

Palaiologos.

1 Accepted Solution

Accepted Solutions

hslai
Cisco Employee
Cisco Employee

> how i can apply this filter only to a specific log server and not to all ?

This is not something ISE supporting at the moment. The collection filters are for ISE M&T nodes only. I would suggest to use an intermediate syslog server to perform such filtering.

 

View solution in original post

1 Reply 1

hslai
Cisco Employee
Cisco Employee

> how i can apply this filter only to a specific log server and not to all ?

This is not something ISE supporting at the moment. The collection filters are for ISE M&T nodes only. I would suggest to use an intermediate syslog server to perform such filtering.