ISE: how to use/analyze monitoring backups

[Giuliano Gerardi]

Is there a tool or any instructions on how to view/analyze the data contained in the scheduled monitoring Backups? (filename.tar.gpg),

I have tryed to decrypt it with gpg4win but the operation result is an empty folder...

thanks in advance

[martyn.rees]

As far as I am aware only TAC can analyze the contents.

[Anas Naqvi]

Hi Giuliano,

Cisco ISE collects log and configuration data from  across the network. It then aggregates the data into reports for you to  view and analyze.

Cisco ISE provides a standard set of predefined reports that you can use and customize to fit your needs.

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_report.html

[sahseth]

Hello,

You need to have authorized access privaleges to review that as per my understanding.

[Naresh Ginjupalli]

Hi Giuliano,

The Monitoring backups that were taken from the Active MNT node can be viewed or analyzed only by restoring them back in the Active MNT node.

You can view the list of MNT backups that you can restore them under the Primary Adminsitration node section Administration - System - Maintanence - Data Management - Monitoring Node - Data Restore.

Normally what happens is as the monitoring data grows we are purging the older monitored data. So If we wnat to view any older monitored data then we have to restore the MNT backups.

Even though you decrypt the backup file using gpg decrypt tool , you cannot read the data from backup file directly.

Thanks,

Naresh

[blenka]

These are the types of back up that are possible in the ISE device.

For more information  please go to the link pasted below.

http://www.cisco.com/en/US/docs/security/ise/1.2/user_guide/ise_backup.html#wpxref35325

•On-Demand Backup Settings

•Cisco ISE Admin Groups, Access Levels, Permissions, and Restrictions

•Backup and Restore Repositories

•Scheduling a Backup

•Performing a Backup from the CLI

•Backup History

•Backup Failures