cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1034
Views
0
Helpful
2
Replies

ISE2.4 : Authentication report : exclude an identity from the report

gillessapene
Level 1
Level 1

We use rancid to backup our +5000 cisco devices configurations. That means that the daily ISE authentication/authorization  reports are flooded with the rancid tacacs account records.

 

Do you know a way to exclude an identity before the (scheduled ) report is created and sent ?

 

I know that I can use a filter like *jdoe* and I can use the OR operator but I have not found a "identity doesn't contain" filter. 

Any suggestion?

thanks

Gilles

1 Accepted Solution

Accepted Solutions

Charlie Moreton
Cisco Employee
Cisco Employee

If you choose the Advanced Filter on your report window, 

Filter1.png

 

You should see the filter which will allow for the exclusion of Identities.  Click the + at the end of the row to add another row.

Filter3.png

 

Remember to Save the Advanced Filter

View solution in original post

2 Replies 2

Charlie Moreton
Cisco Employee
Cisco Employee

If you choose the Advanced Filter on your report window, 

Filter1.png

 

You should see the filter which will allow for the exclusion of Identities.  Click the + at the end of the row to add another row.

Filter3.png

 

Remember to Save the Advanced Filter

Fantastic :)

Thanks a lot.

It works

Gilles