cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

4162
Views
0
Helpful
11
Replies
Highlighted
Beginner

ISE live logs not logging after patch

Hello

   On ISE 2.3 VM and after installing patch 1 the live logs tacac or radius are no longer updating.  all authentications still works but no logs, also system summery dashboard show No Data Available for all nodes.  Did the patch break something or should I have to reset something.

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted

HI,

 

I've still waiting for TAC to come back, sent screen shots.

What they asked me to do was reset the M&T Database on both monitor node and let them rebuild as shown corruption.  but I'm still not receiving logs from PSN.

 

 

View solution in original post

Highlighted

The Live Logs mainly include RADIUS or TACACS+ session information. The logs you are looking for would be found in the Operations > Reports > Audit section (e.g. Change Configuration Audit).

View solution in original post

11 REPLIES 11
Highlighted
VIP Advisor

What happens if you rollback? Is it still the same.
Highlighted

Yes we rolled it back and the issue remained. We then reinstalled the patch same issue.
Highlighted
Enthusiast

I had this problem on ISE 2.2 and upgraded to patch 5 and it worked again. But interestingly enough, prior to this upgrade, I had changed the Radius Live Log Refresh interval to something else and installing patch at the first place did not resolve that issue! Then I accidentally changed another refresh interval and it started to work again! I know this seems so strange but it is what it is!!
Highlighted
Enthusiast

Hi

 

Did you get this sorted?

Have the same issue, wasn't working on 2.2, applied patch 7 still not working.

Have tried the refresh which someone said, but that is only showing 2 devices, when there is over 9k of devices on here.

I've spun up another vm of same version for test, that works, compared settings, all the same.

 

Just wondered if and how you sorted?

 

Cheers

Highlighted

Hi;
As I said, I changed the Refresh Interval and it started to show the entries again! That's strange but you can try it.
Highlighted

Hi

 

I've tried that several times, but no look

 

cheers

Highlighted
Beginner

We have the same issue on ISE 2.3 VM but on our case we didn't do any upgrade but suddenly TACACs live logs also failed to update as well as the system summary dashlet. We tried to restart application services and it worked for a while then the problem showed again. Any update on this issue?

Highlighted

HI,

 

I've still waiting for TAC to come back, sent screen shots.

What they asked me to do was reset the M&T Database on both monitor node and let them rebuild as shown corruption.  but I'm still not receiving logs from PSN.

 

 

View solution in original post

Highlighted
Beginner

Hi,

 

Are there ERS logs (deleting, update, post operations, for example, via API) on the ISE?  

 

I can't see them on ISE's operations tab.

 

Thanks,

 

Peter

Highlighted

The Live Logs mainly include RADIUS or TACACS+ session information. The logs you are looking for would be found in the Operations > Reports > Audit section (e.g. Change Configuration Audit).

View solution in original post

Highlighted

I saw the logs. Thanks so much Greg!