Monitoring Cisco ISE using Elastic
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-20-2020 06:41 PM
Hi Guys,
Has anyone here used Elastic/PacketBeat for any sort of ISE monitoring.
We want to expand and enhance our visibilty of ISE (802.1x Auth logs, performance analytics of auths etc, possible security events and monitoring the actual nodes and processes).
I've been going through the link below and it has been helpful, but I wanted to check if anyone else on here has used Elastic (or something similar) for monitoring.
https://community.cisco.com/t5/network-access-control/ise-monitoring-best-practice/td-p/3604198
TIA.
- Labels:
-
Identity Services Engine (ISE)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-20-2020 11:13 PM
Good Post.
I use many other purposes to get analytics using elastic search. (not tried ISE), but ISE supports REST API, so I am sure there is a way to extract the information and feedback to elastic to JSON dashboard.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-21-2020 05:47 PM
Splunk for Cisco Identity Services (ISE) is a popular choice.
