ISE 3.2 - Unable to view live logs

[vgaur]

Hello everyone,

We've recently deployed two ISE instance in AWS cloud in HA, I had to do a domain change to them after the deployment and although the authentication + authorization is working with Posturing checks, I'm not able to view the reports of live logs.

First of all the live logs takes forever to load and sometime it takes a few refresh of the webpage which is quite frustrating, but even when it load all I see is in the attached image.

When I switchover to another node and make it primary, I'm able to see the live logs but posturing stops working.

I even upgraded them to the latest patch as per software.cisco.com (Patch 3) but the issue is still there. Any help will be greatly appreciated.

[Arne Bier · Accepted solution]

Have you tried regenerating the ISE Messaging Service?

Administration > System > Certificates > Certificate Management > Certificate Signing Request 

Or even regenerating the internal CA (assuming you don't use it for anything)

[vgaur · Accepted solution]

Hello Arne,

Regenerating Internal CA certs and ISE Messaging Server certs fixed the issue. Thanks!