Monitoring Cisco ISE using Elastic

[VinnyR]

Hi Guys,

Has anyone here used Elastic/PacketBeat for any sort of ISE monitoring.

We want to expand and enhance our visibilty of ISE (802.1x Auth logs, performance analytics of auths etc, possible security events and monitoring the actual nodes and processes).

I've been going through the link below and it has been helpful, but I wanted to check if anyone else on here has used Elastic (or something similar) for monitoring.

https://community.cisco.com/t5/network-access-control/ise-monitoring-best-practice/td-p/3604198

TIA.

[balaji.bandi]

Good Post.

I use many other purposes to get analytics using elastic search. (not tried ISE), but ISE supports REST API, so I am sure there is a way to extract the information and feedback to elastic to JSON dashboard.

[hslai]

Splunk for Cisco Identity Services (ISE) is a popular choice.