10-23-2019 06:38 AM
Hi
Is there an API call that can be used to retrieve logs for login failure/success via the CISCO ISE API?
I have tried to use the the FailureReasons API call but had no luck: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/api_ref_guide/api_ref_book.pdf PAGE 3-4
I have seen that the Cisco ISE Portal can be used to view logs for TACACS and RADIUS, but I need to extract the logs via the API to create my own reporting views.
Regards
Martin
Solved! Go to Solution.
10-24-2019 07:20 AM
This coding is a bit beyond me at this point, but if you are looking to do something like this I would look at making my own pxGrid 2.0 client:
https://github.com/cisco-pxgrid/pxgrid-rest-ws/wiki
Parsing this through a Syslog server is also the other method.
10-24-2019 07:20 AM
This coding is a bit beyond me at this point, but if you are looking to do something like this I would look at making my own pxGrid 2.0 client:
https://github.com/cisco-pxgrid/pxgrid-rest-ws/wiki
Parsing this through a Syslog server is also the other method.
10-29-2019 11:54 PM
Thanks for the information, Paul. I will investigate these options and revert back if any of these worked.
10-24-2019 09:09 AM
As Paul mentioned, the best adopted way is to use an external syslog server and parse the messages and automate the reports according to the requirement.
Thanks,
Nidhi
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide