cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
554
Views
0
Helpful
1
Replies
Highlighted
Contributor

CISCO ISE and Solarwinds LEM

Hello experts,

I have a customer wanting to configure his ISE 2.0 server to send syslog messages to his LEM. We tried different ways but we can't make it work.

We configured ISE with the IP of LEM and with logging facility 6.

On LEM we followed this link:

http://www.solarwinds.com/documentation/LEM/Docs/LEM_Evaluation_Guide.pdf

We configured LEM for syslog, defined the IP of ISE but the LEM never finds the node.

Is there something we are missing?

Everyone's tags (3)
1 REPLY 1
Hall of Fame Master

ISE allows you to run packet

ISE allows you to run packet capture to troubleshoot. I'd do that, filtering on the LEM host address. 

If your ISE deployment is distributed, the syslog messages should be coming from the Primary M&T node.