cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
930
Views
5
Helpful
1
Replies

ISE 2.1 and remote log server questions

csco11552159
Level 5
Level 5

Hi Folks,

Another question about ISE 2.1 and Arcsight integration. Is there a way to use pxgrid to integrate Arcisght now?

If not,we have 2 MNT nodes in 2 regions.

1) Can we setup log from each MNT server only sends to the local region Arcsight server ?

2) How the MNT works? On NAD switch, should we send to both MNT or only configure the local MNT for the NAD?

Thank you.

1 Accepted Solution

Accepted Solutions

jeppich
Cisco Employee
Cisco Employee

Hi Chao,

No, Arcsight does not use pxGrid to integrate with ISE, Arcsight uses ISE syslog information for integration. You would configure Arcsight as the syslog server in your local ISE instance. Administration->System->Logging->Remote Logging Targets.

Also if you send me an email, i will send you the Arcsight Integration guide.

Thanks,

John

jeppich@cisco.com

View solution in original post

1 Reply 1

jeppich
Cisco Employee
Cisco Employee

Hi Chao,

No, Arcsight does not use pxGrid to integrate with ISE, Arcsight uses ISE syslog information for integration. You would configure Arcsight as the syslog server in your local ISE instance. Administration->System->Logging->Remote Logging Targets.

Also if you send me an email, i will send you the Arcsight Integration guide.

Thanks,

John

jeppich@cisco.com