ISE API - Endpoint Attributes

[ryanmbess]

Hello,

I've been poking around at the various ISE APIs including exporting endpoints via context visibility (CSV file exports) and not finding a way to export the endpoint WITH the inactivity days attribute.  We have devices that the users may not tell us when they are retired and we can't purge them automatically.  The not purging isn't a technical limitation but rather its if we purge them we may break something as these devices aren't used all that often. 

Anyone know how i can get this data?

[Marcelo Morais]

@ryanmbess ,

 you can use the CLI command:

ise/admin# application configure ise

Selection configuration option
 ...
 [16]Get all Endpoints
 ...
 [0]Exit

and check the Inactivity Days attribute.

Note: Inactivity Days has a lot of weird bugs, please take a look at

CSCwr43745 Inactive Endpoint dashlet in Context Visibility is not matching with the inactive days information present in redis cache or DB

Hope this helps !

[Cristian Matei]

Hi,

    From Context Visibility choose the Export menu option, there is a column for "Update Time" which tells you the last time ISE saw anything for that endpoint. You can afterward configure "Endpoints Purge Settings": https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/admin_guide/b_ise_admin_3_2/b_ISE_admin_33_maintain_monitor.html

Thanks,

Cristian.