cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

290
Views
0
Helpful
2
Replies
Highlighted
Beginner

ISE2.4 : Authentication report : exclude an identity from the report

We use rancid to backup our +5000 cisco devices configurations. That means that the daily ISE authentication/authorization  reports are flooded with the rancid tacacs account records.

 

Do you know a way to exclude an identity before the (scheduled ) report is created and sent ?

 

I know that I can use a filter like *jdoe* and I can use the OR operator but I have not found a "identity doesn't contain" filter. 

Any suggestion?

thanks

Gilles

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

If you choose the Advanced Filter on your report window, 

Filter1.png

 

You should see the filter which will allow for the exclusion of Identities.  Click the + at the end of the row to add another row.

Filter3.png

 

Remember to Save the Advanced Filter

View solution in original post

2 REPLIES 2
Highlighted
Cisco Employee

If you choose the Advanced Filter on your report window, 

Filter1.png

 

You should see the filter which will allow for the exclusion of Identities.  Click the + at the end of the row to add another row.

Filter3.png

 

Remember to Save the Advanced Filter

View solution in original post

Highlighted

Fantastic :)

Thanks a lot.

It works

Gilles