09-24-2019 08:48 AM - edited 02-21-2020 11:09 AM
Running ISE 2.4, i am unable to create a report that includes the called-station-id field
It is not in the columns available for reporting.
Is there a way to report on this AV pair?
Can AV pairs from auth logs be exported via syslog?
Much appreciated
-Eric M
Solved! Go to Solution.
09-25-2019 10:26 PM
You are correct that the called-station-ID only available in authentication detailed reports, which are not available for export.
Yes, an external syslog target is an option to obtain this info. Configure Cisco ISE to send logs to Splunk Enterprise for the Splunk Add-on for Cisco ISE might of interest to you.
09-25-2019 10:26 PM
You are correct that the called-station-ID only available in authentication detailed reports, which are not available for export.
Yes, an external syslog target is an option to obtain this info. Configure Cisco ISE to send logs to Splunk Enterprise for the Splunk Add-on for Cisco ISE might of interest to you.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide