cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

233
Views
1
Helpful
2
Replies
fkaleem
Cisco Employee

Is it possible that ISE can filter logs, on basis of any particular parameters and send to three to four different syslog servers?

Hi All,


Can some let me know if Is it possible that ISE can filter logs, on basis of any particular parameters and send to three to four different syslog servers? Purpose is to send only relevant logs to each different department of the customer using a shared ISE Taacacs+ infrastructure.  Thanks

1 ACCEPTED SOLUTION

Accepted Solutions
hslai
Cisco Employee

ISE can send syslog to different targets based on logging categories. See Configure Remote Syslog Collection Locations

However, ISE can't send syslog based on criteria such as network devices. I would suggest to have ISE send to a centralized syslog server first, and then some app or script(s) on that syslog server to parse and to forward to a desired syslog target.

View solution in original post

2 REPLIES 2
hslai
Cisco Employee

ISE can send syslog to different targets based on logging categories. See Configure Remote Syslog Collection Locations

However, ISE can't send syslog based on criteria such as network devices. I would suggest to have ISE send to a centralized syslog server first, and then some app or script(s) on that syslog server to parse and to forward to a desired syslog target.

fkaleem
Cisco Employee

Many thanks Hslai for your excellent assistance. Faheem

Create
Recognize Your Peers
Content for Community-Ad

ISE Webinars


Miss a previous ISE webinar?
Never miss one again!

CiscoISE on YouTube