ISE Alarm : Warning : Configured nameserver is not responsive within timeout period.

[ryan14]

Is there a way to get a debug log or something more verbose than the alarm on what nameserver or what query the ISE node had trouble with? In the GUI, if I go to the alarm, it says no details available and repeats the alarm message.

ISE 2.7 patch 3.

[Marcelo Morais]

Hi,

 at Administration > System > Logging > Debug Log Configuration > select your Node > choose the Component Name and change the Log Level.

Hope this helps !!!

[ryan14]

Thanks any idea which component to change?

[101100101]

That won't change anything related to the alarm detail, only the severity it logs as.

Curious are any of your name servers actually not responding or are they healthy? If you have a multi-node environment is the alert happening for all nodes? Lastly do you have any AD domains listed as Unuseable? (External Identity Sources -> AD Domain -> Whitelisted Domains -> Show Unuseable Domains)

I ask because I am running the same version and patch, and it looks like I am hitting CSCvh02628 even though it should be resolved at this point. TAC is working now on attempting to replicate in the lab and see if its a regression.

[ryan14]

Thats kinda why I wanted to know which log to look at to see which server it is having issues with. I have two ISE nodes in separate DCs and the one reporting the issue is a new server which talks to different DNS servers. But if I go to External Identity Sources and look at the status, they all show green. Unusable domains shows 'domain trust is one way' for one join point, but that is how it was before. I guess I could try changing DNS servers to see if the issue persists. Its random and the event only occurs 1-2 times a day, but for just one node.