cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Cisco ISE Reporting

liamnap
Beginner
Beginner

hi all,

 

I'm trying to create a custom report in ISE. In effect I want to do an ALL, with some ORs.

 

Different reports offer different fields though, and in effect I'm trying to find a way to create a report from brand new or add a field/column to a report for filtering, this column would be User-Fetch-LocalityName, this is the one I found once but cannot find again - any advice?

 

Full report filtering:

Logged within last 12 hours
AND
Device Type is WLC OR Switches
AND
Location is Southampton OR London
AND
User-Fetch-LocalityName is blank OR London

 

Thank you for any helps.

 

Kind Regards,

Liam

1 ACCEPTED SOLUTION

Accepted Solutions

There is limited customisation supported by the built-in ISE reporting engine. We typically recommend sending Syslog to an external SIEM like Splunk and building custom reports and dashboards for collating and presenting the information required.

View solution in original post

4 REPLIES 4

Marcelo Morais
VIP Advisor VIP Advisor
VIP Advisor

Hi @liamnap ,

 please try at Operations > Reports > Reports > Endpoints and Users > RADIUS Authentications > select Filter > Advanced Filter

 

Hope this helps !!!

liamnap
Beginner
Beginner

Thank you Marcelo, but this is exactly what I am trying, if you notice the column options I cannot produce a report filtering on both Location and User-Fetch, or perhaps your UI is different to mine somehow?

There is limited customisation supported by the built-in ISE reporting engine. We typically recommend sending Syslog to an external SIEM like Splunk and building custom reports and dashboards for collating and presenting the information required.

DMel
Beginner
Beginner