Cisco ISE 2.7 patch 7 : ISE indexing service not running

[pratik parikh]

Hello All,

I have Cisco ISE 2 nodes (PRI and SEC) running 2.7 with patch 7

We were planning to install patch 8. 

As per Cisco release notes, it is suggested to remove hotpatch for log4j before installing or upgrading patch.

After removal of hotpatch from secondary server, ISE Indexing engine service went down.

Tried restarting the ISE services, also reloaded the ISE but service is not coming UP.

NTP, DNS and Certificate looks okay.

[marce1000]

   - Have a look at show logging system ade/ADE.log (after reload , for instance) , 

 M.

[Rodrigo Diaz]

hi @pratik parikh , please attempt to do a reset/sync up of context visibility as per the following link https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-23/213610-ise-2-3-rest-sync-context-visibility.html , this should help with the indexing engine. 

Let me know if that helped. 

[balaji.bandi]

what happened if you patch again is the index server coming up?

[cchiteta · Accepted solution]

The same thing happed to our deployment yesterday. We were going to patch 9 and as soon a week took the log4j hotfix of the index engine stopped working. Is there a fix for this.

[Rodrigo Diaz]

Hi @cchiteta have you already tried to reset/sync up context visibility as suggested in my previous post ? 

[cchiteta]

Yes I retried that and it didn't work. I had to end up rebuilding ISE from scratch restoring from backup after applying patch 9 and that fixed it.

[davidgfriedman]

Thanks for the information about v2.7 patch 9.  Before this post, i had no idea patch 8 was pulled and replaced by Patch 9.  I'm bringing that question up in my meeting with professional services tomorrow.