I want to understand when each of the ISE logs categories Profiler & Passed Authentication occur.
I assume the Passed Authentications occur every new authentication of an endpoint, but I don't quite understand how ISE decides whether to write a Profiler log for an authentication.
I looked into it and Passed Authentications has much more records, while the Profiler has very few records, and is written once every 10 minutes. I do see the same device getting the same attributes in the profiler log over and over again, without getting a new profile.
Can anyone help me with that?
Thanks in advance,