cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1044
Views
5
Helpful
2
Replies
ShaquilleDaniel
Beginner

Prime to APIC Pole Job Showing in TACACS Logs

Hi,

I have my Prime and APIC controller authentication over TACACS VIA ISE. The issue im having is that every 5 minutes when the poling takes place between Prime and APIC I am seeing it in ISE TACACS Logs. I cant change the pole interval and the sheer number of poles per-day is causing an issues with seeing user logins to the both appliances.  

1 ACCEPTED SOLUTION

Accepted Solutions
Damien Miller
VIP Advisor

In the past it was not possible to suppress TACACS logs, but it appears that an enhancement request has been completed and as of 2.4 p6 (or 2.6) you should be able to do this.  
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvb45390

 

Try to create a log collection filter here, filtering passed authentications for the APIC IP or username. 

https://<ISE IP>/admin/#administration/administration_system/administration_system_logging/collection_filters

filter.png

 

 

 

View solution in original post

2 REPLIES 2
Damien Miller
VIP Advisor

In the past it was not possible to suppress TACACS logs, but it appears that an enhancement request has been completed and as of 2.4 p6 (or 2.6) you should be able to do this.  
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvb45390

 

Try to create a log collection filter here, filtering passed authentications for the APIC IP or username. 

https://<ISE IP>/admin/#administration/administration_system/administration_system_logging/collection_filters

filter.png

 

 

 

View solution in original post

Thanks Damien, this did the trick.
Content for Community-Ad