ISE 1.1.1 Collection Filter

[patrick.kofler]

Hi there,

I wanted to ask if there is a collection filter in the ISE similar to ACS 5.3, where I can filter out unwanted syslogs.

Regards,

Patrick

[Venkatesh Attuluri]

Try these steps

Step 1 From the ISE Administration  Interface, choose Administration > System > Logging > Remote Logging  Targets.

The Remote Logging Targets page appears  with a list of existing logging targets.

Step 2 Click Filter and choose one of the  following options:

•Quick Filter

•Advanced Filter

To perform a quick filter, enter search  criteria in one or more of the following attribute  fields:

•Name

•IP Address

•Type

•Description

To perform an Advance filter, create a  matching rule by performing the following:

•In the Filter drop-down list, select one  of the following options:

–Name

–IP Address

–Type

–Description

•In the second drop-down list, select one  of the following options:

–Contains

–Does not contain

–Does not equal

–Ends with

–Is empty

–Is exactly (or  equals)

–Is not empty

–Starts with

•In the text box, enter your desired search  value.

•Click Go to launch the filter process, or  click plus to add additional search criteria.

•Click Clear Filter to reset the filter  process.

The desired remote logging targets are  displayed.

[Jatin Katyal · Accepted solution]

The "ACS equivalent: collection filter" is not supported yet. This is planned for ISE 1.2

Jatin Katyal


- Do rate helpful posts -

Understanding Collection Filters

You can create collection filters that allow you to filter and drop syslog
events that are not used for monitoring or troubleshooting purposes. When
you configure collection filters, the Monitoring & Report Viewer does not
record these events in the database and saves much needed disk space."