Logs in ISE

[alinbaby]

Any idea on from which node ISE is getting live logs and reports ?

[balaji.bandi]

MNT node is responsible for Log and report in distributed environment.

[Marcelo Morais]

Hi,

 beyond what @balaji.bandi said ... remember that:

"... If a Syslog Server is configured in a Distributed Deployment, syslog messages are sent directly from the authenticating PSNs to the Syslog Server and not from the MnT Node..."

 In other words, PAN GUI gets the logs from the MnT Node, but the Syslog Server gets the syslog messages from PSNs.

Hope this helps !!!

[alinbaby]

Thanks Balaji and Marcelo. Can you confirm whether live logs are fetched from PSN or MNT ?

[Marcelo Morais]

Hi @alinbaby, 

PAN GUI gets the logs (Live Logs and Reports) from the MnT Node (PSNs logs are sent to MnT).

Syslog Server gets the syslog messages from PSNs in a Distributed Deployment.

Regards.