cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3500
Views
20
Helpful
4
Replies

Log collection error

CansuTkr1
Level 1
Level 1

Hi guys ,

I have seen ISE alarm about log collection error . Dou you know this issue , how can we solve it , could you please help  ?

Thanks

Details :

Log collection error : Server=gtisegunpsn5; Log Type=RadiusAuthenticationPassed

 

Description :

The ISE M&T collector process is unable to persist the audit logs generated from the Policy Service nodes

 

 

4 Replies 4

Gagandeep Singh
Cisco Employee
Cisco Employee

My research indicates this message is normally generated by a
syslog string from a RADIUS authentication that is too long for a write location in the MnT DB when ISE attempts to log it on the MnT. It's purely cosmetic in nature.

CSCue78265 log Collection error in Mnt-collector.out

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCue78265/?reffering_site=dumpcr

Fixed in ISE 2.1.

Regards

Gagan

PS : rate if it helps!!!!!

Hi gagsing3 , 

Many thanks for respone  , it can be effect our enviroment . Our version is ISE 1.4 , may be the issue isn't yet seen in this version .

You can try refresh the M&T database using "application configure ISE" command and choose option for Refresh M&T database.

As per my understanding, it should not affect the n/w. Did you face any authentication failure. 

I would also suggest to upgrade to 2.1 our latest release with enhanced features.

Regards

Gagan.

PS : rate if it helps!!!!!

we have this every day randomly across 3 PSNs on 2.2.0.470 p16