02-07-2014 08:56 AM - edited 03-10-2019 09:22 PM
Dear community,
I trying to figure out how I can ensure the messages I get in the section Operations > Authentications goes to a syslog.
I tried several severity and messages from Admin > Logging > Logging Categories
But I'm not able to get when someone auth with his IP / MAC and the associated details...same goes when he is not able to auth...
In ISE I can clearly see that coming with full details but no way to have that redirected to a syslog...
I someone able to help me out with this?
thanks a million
02-07-2014 09:09 AM
I found the solution,
It was under :
Failed Attempts
Passed Authentications
And a bit of patience :-)
02-07-2014 04:31 PM
closing the loop on this for the rest of the list. a few relevant bugs have been posted on this subject against 1.2. first one is mine:
[FEATURE REQUEST] normalize and distill syslog export feeds for SIEMs
http://cdetsweb-prd.cisco.com/apps/dumpcr?identifier=CSCum23641
ISE syslog messages should be consistent
http://cdetsweb-prd.cisco.com/apps/dumpcr?identifier=CSCul99532
doc Local Store and Syslog Message Format
http://cdetsweb-prd.cisco.com/apps/dumpcr?identifier=CSCui61280
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide