how can we see ise old logs ?

[hashimwajid1]

hi 

we want to check ise old logs (logs which are 2 weeks older). but under rasius live logs it shows logs of last 24 hours only.

basically we want to filter 1 incident occured 2 weeks ago from particular NAD AP.

Thanks 

[Nadia Bbz]

Hi

In cisco ISE you can see just live log for 24h

you should configure SIEM  for saving log

[balaji.bandi]

depends log retention policy you have setup.

[Panos Bouras · Accepted solution]

Hi,

You should go under Operations -> Reports and select Endpoints and Users.

Then you can probably use RADIUS Authentications ans RADIUS Accounting to extract the info that you need.

Keep in mind that by default ISE keeps 30 days worth of RADIUS logs, if you need to change that you have to go under Administration -> Maintenance -> Operational data purging.

Hope that helped you.

[MED Amine MB]

Hello ,

I found out that you should also check in administration->logging->log settings  and verify the "local log storage period " . 

Regards ,