cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

334
Views
5
Helpful
1
Replies
Contributor

ISE 2.1 and remote log server questions

Hi Folks,

Another question about ISE 2.1 and Arcsight integration. Is there a way to use pxgrid to integrate Arcisght now?

If not,we have 2 MNT nodes in 2 regions.

1) Can we setup log from each MNT server only sends to the local region Arcsight server ?

2) How the MNT works? On NAD switch, should we send to both MNT or only configure the local MNT for the NAD?

Thank you.

Everyone's tags (5)
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Re: ISE 2.1 and remote log server questions

Hi Chao,

No, Arcsight does not use pxGrid to integrate with ISE, Arcsight uses ISE syslog information for integration. You would configure Arcsight as the syslog server in your local ISE instance. Administration->System->Logging->Remote Logging Targets.

Also if you send me an email, i will send you the Arcsight Integration guide.

Thanks,

John

jeppich@cisco.com

View solution in original post

1 REPLY 1
Highlighted
Cisco Employee

Re: ISE 2.1 and remote log server questions

Hi Chao,

No, Arcsight does not use pxGrid to integrate with ISE, Arcsight uses ISE syslog information for integration. You would configure Arcsight as the syslog server in your local ISE instance. Administration->System->Logging->Remote Logging Targets.

Also if you send me an email, i will send you the Arcsight Integration guide.

Thanks,

John

jeppich@cisco.com

View solution in original post