cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
844
Views
0
Helpful
2
Replies

Use Monitoring REST to query information of endpoints

yanmtang
Level 1
Level 1

The version of ISE is 1.4.0.253.

1. For the APIs below, it seems only the currently active sessions can be searched.

https://<ISEhost>/admin/API/mnt/Session/AuthList/<parameteroptions>

https://<ISEhost>/admin/API/mnt/Session/MACAddress/<macaddress>

I wonder whether there is API to provide functionality like to get the active session list during certain time range.

2. I use my phone to login with username alpha and successfully permit access to the network. Then use username beta and the wrong password and fail to access the network. When I am using the API below to query the auth status, the login of beta will not be shown, only session with username alpha is recorded. (numberofrecordspermacaddress is set to 10)

https://<ISEhost>/admin/API/mnt/AuthStatus/MACAddress/<macaddress>/<numberofseconds>/<numberofrecordspermacaddress>/All

It is strange that if this MAC successfully login once, the failed session will not be displayed.

Thanks for your explanation.


BR

Sherry

2 Replies 2

Parag Mahajan
Cisco Employee
Cisco Employee

I have also experienced the same behavior. I am not sure if it is expected behavior

hslai
Cisco Employee
Cisco Employee

That is correct. The APIs are for active sessions.