cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2078
Views
0
Helpful
4
Replies

Passive ID Provider down - Alerting?

InTheJuniverse
Level 1
Level 1

We are on ISE 2.4 and have configured AD <> ISE integration using WMI (to get information of AD users)

 

Some providers suddenly went offline for no reason, we had to manually add back integration 

 

Is there a way to set an email alerting when a Provider goes offline? Screenshot attached

 

 
 

ise.png

 

I had a look at Administration > System > Settings > Alarm Settings but nothing .

4 Replies 4

InTheJuniverse
Level 1
Level 1

Work Centres > Passive ID > Reports > Passive ID

 

Severity : Error

Provider Type: WMI

Domain : xyz

Event: Cannot get Domain Controller NetBIOS

 

 

This is the alert that I am looking to setup email alerting for.

I don't believe there is an email alert for that event, but there are syslog messages related to it. You could look at sending logs for the Passive ID category to an external syslog server or SIEM and generating an email from there.

 

Screen Shot 2021-05-13 at 9.37.16 am.png

faranzafar
Level 1
Level 1

I have the same issue, all of sudden all of my passive identity providers(wmi) based went down. 
unable to bring them back.

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: