cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

463
Views
6
Helpful
3
Replies
Gagandeep Singh
Cisco Employee

Does collection filter works for TACACS on ISE.

Hi Team,

Customer created a few filters to keep the logs clean. Two of them are for RADIUS access so they don’t clog up the RADIUS logs. They work just fine. The last one in this list, “s00apic-em”, is for TACACs but it’s logs are still showing up in the TACACs log.

Attached capture for reference.


As per my understanding, Collection Filters to suppress the syslog messages being sent to the monitoring and external servers. The suppression can be performed at the Policy Services Node levels based on different attribute types.


In our case, it only works for RADIUS. Is there any restriction for TACACS.


Regards

Gagan

1 ACCEPTED SOLUTION

Accepted Solutions
hslai
Cisco Employee

No. CSCvb45390 is a S6

View solution in original post

3 REPLIES 3
hslai
Cisco Employee

No. CSCvb45390 is a S6

View solution in original post

Are there any plans to fix that? We are writing about 4GB of TACACS only logs per day. And I would like to reduce that a little bit.

Still a roadmap item.

Content for Community-Ad