Solved: ISE did not seem to have reloaded after patch install

atsukane · ‎02-22-2025

Hi all,

Just installed patch 7 on our ISE 3.2 two nodes deployment.

I've initiated the install from GUI, expecting that patch install will take some time, stepped away for a bit (10-15minutes or so) to help my son move his furnitures, then came back to ssh onto both nodes. On the primary node I've issued "show logging system ade/ADE.log tail" to check the progress, and I had anti-idle string sent from ssh client (secureCRT) on the secondary node.

After an hour or so checked GUI and issued "show version" on both nodes which tells me that patch 7 is installed, but I did not see any reboot?

Cisco Identity Services Engine Patch 
---------------------------------------------
Version      : 7
Install Date : Sat Feb 22 13:12:55 2025

"show uptime" outputs seem to suggest that the both nodes have been reloaded 2hrs ago? Though I'm not sure if I'm reading the show uptime results correctly. Install was started at around 13:09.

Solarwinds didn't alert us for the devices being down, so I'm a bit confused. Should I proceed to reload the devices anyway?

ISE_PRI/admin#show uptime                         
 15:47:48 up  2:33,  1 user,  load average: 0.15, 0.19, 0.18

ISE_SEC/admin#show uptime
 15:47:53 up  2:19,  1 user,  load average: 0.14, 0.20, 0.20

thanks,

marce1000 · ‎02-22-2025

- To me , it looks like they have reloaded ;issue the command : show application status ise
to checkout each node (verify that all ISE services are up and running).
In the future consider installing patches trough the CLI on each node separately which gives more
control over the patching process and the ability to have more verbose output,

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

View solution in original post

marce1000 · ‎02-22-2025

- To me , it looks like they have reloaded ;issue the command : show application status ise
to checkout each node (verify that all ISE services are up and running).
In the future consider installing patches trough the CLI on each node separately which gives more
control over the patching process and the ability to have more verbose output,

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

atsukane · ‎02-24-2025

Thanks for your response @marce1000.

Should've mentioned that i did check the application statues on both nodes and confirmed everything is as expected before asking question here.

I usually use the CLI for upgrade and patch install, but wanted to try the GUI option to see.

I strongly agree that the CLI is the option of choice going forward.

Many thanks!