Cisco ISE Alarm Severity

[Grant Butler]

Hi all,

We're looking to improve our monitoring into the ISE environment and we're looking to modify the built-in alarms so we may reduce the severity of some alerts (we're not interested in a warning level alert for someone needing to change their password) however we're unable to change the severity of this alert as we cannot interact with the severity drop-down box.

Without using external tools to filter out the alerts (imo, better to filter from the source rather than the collector), how may we proceed in making changes to our alarms so they're more meaningful?

Thanks.

[hslai]

You may disable it.

[Grant Butler]

I was hoping there was a method where we could just downgrade the severity of the alert, as they are somewhat meaningful but potentially not as high a severity as what Cisco suggests. Is there potential here for this 'lockout' to be lifted or?

[hslai]

None other than asking for an enhancement.