cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

359
Views
6
Helpful
3
Replies
Highlighted
Cisco Employee

Does collection filter works for TACACS on ISE.

Hi Team,

Customer created a few filters to keep the logs clean. Two of them are for RADIUS access so they don’t clog up the RADIUS logs. They work just fine. The last one in this list, “s00apic-em”, is for TACACs but it’s logs are still showing up in the TACACs log.

Attached capture for reference.


As per my understanding, Collection Filters to suppress the syslog messages being sent to the monitoring and external servers. The suppression can be performed at the Policy Services Node levels based on different attribute types.


In our case, it only works for RADIUS. Is there any restriction for TACACS.


Regards

Gagan

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Re: Does collection filter works for TACACS on ISE.

No. CSCvb45390 is a S6

View solution in original post

3 REPLIES 3
Highlighted
Cisco Employee

Re: Does collection filter works for TACACS on ISE.

No. CSCvb45390 is a S6

View solution in original post

Highlighted
Enthusiast

Re: Does collection filter works for TACACS on ISE.

Are there any plans to fix that? We are writing about 4GB of TACACS only logs per day. And I would like to reduce that a little bit.

Highlighted
Cisco Employee

Re: Does collection filter works for TACACS on ISE.

Still a roadmap item.