CISCO ISE nodes restart unexpectedly

[henokk60]

Hi All,

We deployed ISE in a distributed deployment and, unexpectedly, the PSN and PAN nodes restarted twice, causing a service disruption. Could you please let me know how I can find the exact logs for the node restarts?

Thanks

[marce1000]

  - @henokk60     Use a console attached to the nodes , to get info's and outputs from those restarts, 
                           including possible reasons.

  M.

[henokk60]

@marce1000 Thanks for your reply. Can you please send me some commands that will help me with my checks?

[marce1000]

  - @henokk60     Try to engage on the issue according to my initial reply first; that is the more important thing to do.

  M.
                           

[klnnnnng]

Hi,

you can use 

show logging system ade/ADE.log

show logging application ise-psc.log

or download the show-tech and check for any issues with processes and performance.

[henokk60]

@klnnnnng Do these commands affect performance, or should they be run during a maintenance window since the system is in production?

[klnnnnng]

Hi,

you can run them anytime.

[PSM · Accepted solution]

You should open a TAC case and get them investigate the reason. You can download support bundle which include logs. To download the support bundle you can use GUI. Go to Opertaion>Troubleshoot>Download logs. Select applicable node and then check on Include debug logs, Include system logs. Define the date when the issue occurred. Select Public Key encryption. Create support bundle. When support bundle is created you can download and share with TAC to investigate it.