cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1499
Views
5
Helpful
2
Replies

Prime to APIC Pole Job Showing in TACACS Logs

ShaquilleDaniel
Level 1
Level 1

Hi,

I have my Prime and APIC controller authentication over TACACS VIA ISE. The issue im having is that every 5 minutes when the poling takes place between Prime and APIC I am seeing it in ISE TACACS Logs. I cant change the pole interval and the sheer number of poles per-day is causing an issues with seeing user logins to the both appliances.  

1 Accepted Solution

Accepted Solutions

Damien Miller
VIP Alumni
VIP Alumni

In the past it was not possible to suppress TACACS logs, but it appears that an enhancement request has been completed and as of 2.4 p6 (or 2.6) you should be able to do this.  
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvb45390

 

Try to create a log collection filter here, filtering passed authentications for the APIC IP or username. 

https://<ISE IP>/admin/#administration/administration_system/administration_system_logging/collection_filters

filter.png

 

 

 

View solution in original post

2 Replies 2

Damien Miller
VIP Alumni
VIP Alumni

In the past it was not possible to suppress TACACS logs, but it appears that an enhancement request has been completed and as of 2.4 p6 (or 2.6) you should be able to do this.  
https://quickview.cloudapps.cisco.com/quickview/bug/CSCvb45390

 

Try to create a log collection filter here, filtering passed authentications for the APIC IP or username. 

https://<ISE IP>/admin/#administration/administration_system/administration_system_logging/collection_filters

filter.png

 

 

 

Thanks Damien, this did the trick.
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: