ISE - Report when user logs on

[jphilp]

Hi All,

does anyone know if it is possible for ISE to send an alert/notification when a specific user logs on?

i.e. when user johnsmith logs in, ISE sends an SNMP or email alert

thanks

John

[andrewswanson]

Hi

Interesting question.

I haven't tried this but under Administration > System > Settings > Alarm Settings you can add an Alarm with

Alarm Type: Excessive RADIUS Authentication Attempts

you can specify what user triggers the alarm and the "Occurrences greater than" - maybe an "Occurrences greater than" 0 would trigger this alarm (which you could configure to send you an email)

hth
Andy