cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2408
Views
7
Helpful
6
Replies

Collection filter question.

Dustin Anderson
VIP Alumni
VIP Alumni

I'm trying to filter all the checks form F5 monitor and the document said to create a collection filter. I've created the filter, but my Live Logs are still showing everything.

Am I just missing something?

ISE 2.2 patch 1

F5 filter.JPG

LiveLog.JPG

1 Accepted Solution

Accepted Solutions

did you tried to resync the secondary node?

View solution in original post

6 Replies 6

umahar
Cisco Employee
Cisco Employee

Check that there is no sync problems between Admin and your PSNs.

Other than that I don't see any issue unless there is a defect.

hariholla
Cisco Employee
Cisco Employee

Hi Dustin,

I don't see any issue with your configuration. Thats all you need to filter the logs. I also did a quick validation in my lab that has ISE 2.2 (without any patches) and see things working fine. Let me check internally if there are any known caveats around this.

Cheers!

-Hari

Dustin Anderson
VIP Alumni
VIP Alumni

We just have 2 servers doing everything. Does this only work for PSN,s and not admin nodes?

Dustin Anderson
VIP Alumni
VIP Alumni

Actually, just playing with it. The filter is suppressing the log, but just on the primary node. The ones that come through are from the secondary node.

did you tried to resync the secondary node?

Dustin Anderson
VIP Alumni
VIP Alumni

Thanks,

it showed everything was fine, but re syncing seems to have fixed it.