cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

237
Views
0
Helpful
1
Replies
Highlighted
Beginner

ISE - Report when user logs on

Hi All,

does anyone know if it is possible for ISE to send an alert/notification when a specific user logs on?

i.e. when user johnsmith logs in, ISE sends an SNMP or email alert

 

thanks

John

1 REPLY 1
Highlighted
Contributor

Hi

Interesting question.

 

I haven't tried this but under Administration > System > Settings > Alarm Settings you can add an Alarm with

Alarm Type: Excessive RADIUS Authentication Attempts

 

you can specify what user triggers the alarm and the "Occurrences greater than" - maybe an "Occurrences greater than" 0 would trigger this alarm (which you could configure to send you an email)

hth
Andy

Content for Community-Ad