Cisco ISE Warning Log collection error : Server=ise; Log Type=ADProbe

[stayd]

Hi,

have you ever seen such warning in Alarms Dashboard in Cisco ISE 2.7 patch 9.

I am not sure when it appeared, but maybe it is connected somehow with installing the patch 9.

Cisco Identity Services Engine Patch
---------------------------------------------
Version : 9
Install Date : Thu May 11 21:52:33 2023

May 12 2023 00:00:32.920 AM

Log collection error : Server=ise; Log Type=ADProbe

After opening the warning there is more info:

Alarms: Log Collection Error

Description

The ISE M&T collector process is unable to persist the audit logs generated from the Policy Service nodes

Suggested Actions

This will not impact the actual functionality of the Policy Service nodes, Please contact TAC

At this moment warning is appearing every 2 hours.

[marce1000]

             - FYI : https://bst.cisco.com/bugsearch/bug/CSCvv08466

 M.

[stayd]

Hi marce, this is not this case, I have ISE 3.1 patch 6. The highiest fixed version according bug is 3.0 patch 1.

Workaround does not work also, no resetting of mnt db works for me.

[marce1000]

            - Contact TAC , 

 M.