Cisco ISE: How to identify/inactive old users?

[Benjamin Lehner]

Hello,

I want to get all users / mac-adresses which haven't connected to out network since 180 days.

How can I query that?

The report "Dormant Users" dont seems to be the right way: it displays current associated users which are inactive...

How can I purge Cisco ISE : cleaning it from useless, old, inactive mac-addresses?

Thank you very much for any answer

[nathan demers]

The only thing I could find was purging data in the MNT node.  The default is 90 days.  This doesnt apply because the profiles are store on the policy node.  I dont think you can in an automated form.  

You could change the MNT to purge after 210 days and then run a report to see which macs have not authc in the passed 180 days.  That will require excel and some scripting.

[Venkatesh Attuluri]

ISE report show logged in and logged out timings you can generate report and use excel or other script to accomplish this