Retrieving Past Session and User IDs using Cisco ISE API

[kkt1195]

While the ISEIP/admin/API/mnt/Session/ActiveList API can provide information on currently active sessions, I am unsure of how to obtain the number of sessions and user names for sessions that were active (but have since ended) during a specific period.

[balaji.bandi]

Try the below guide may be helpful - what you looking (this is just a pointer - may be not a solution)

https://community.cisco.com/t5/security-knowledge-base/ise-monitoring-api-examples/ta-p/4800437/jump-to/first-unread-message

[Greg Gibbs · Accepted solution]

There is no way to get historical session information using the API. You would need to use either the built-in ISE Reports or, if you need something more flexible/customisable, send this information to external syslog collector (like Splunk) and create custom queries on that platform.