Cisco ISE Monitoring API - How to get information from the session?

[ShuningWu14393]

Hi, 

We tried these two requests on Monitoring API to get the session list information, but could not get any records from the response (response is always empty):

https://<ISEhost>/admin/API/mnt/Session/ActiveList

https://<ISEhost>/admin/API/mnt/Session/AuthList/<parameteroptions>

Do we miss anything?

Thanks!

[Damien Miller]

First, and just to make sure, the call is run against the node(s) that is/are running the MNT persona. If the primary MNT results in no sessions being dumped out, then I would try it against the secondary MNT. If the secondary provides the sessions, then you might be running in to a bug with the primary's session table. If neither primary nor secondary provides sessions, then that's also something you would want to contact TAC on. A word of caution as well on this web API call, this is pretty resource intensive as the number of live sessions grows. 

I just pulled these out of a node running 2.7 patch 2.  

[ShuningWu14393]

Thanks much for your reply! How could we check if the call is running against primary vs. secondary MNT? Do they have different API URLs?

[Damien Miller]

Yes, It's based on the hostname/IP/URL you make the browser call against. You can get the names / IP's for the MNT nodes from the deployment view.
https://<ise admin fqdn>/admin/#administration/administration_system/administration_system_deployment

[ShuningWu14393]

Thanks again! Is there any API for the administration_system_deployment? Or do we need to check the deployment view under ISE UI?