Set ISE 1.4 for Kiwi syslog

[Eric]

Hello,

I set up ISE 1.4 for Kiwi syslog 9.4. It's not working. Could someone help?

Regards

Eric

[Marvin Rhoads]

"Not working" - could you be more specific?

The setup on ISE looks correct. Only ISE system level entries will be generated - not full RADIUS accounting.

You should be able to see messages leaving ISE via the packet capture tool. Once you've confirmed that, check to see they are arriving on your Kiwi host using Wireshark.

[Eric]

hello,

thanks for your suggestion.

In fact, I used wireshark and it seems that no packet arrives on Kiwi. But, if I modify for example "facility code" on ISE, it send a syslog to kiwi as shown below. So, for me the problem is on ISE 1.4. 

Regards

[Eric]

Hello,

I got it. The problem was with tu option "Logging Categories" on cisco ISE. I add kiwi on different categories and it now works.

Thank you.