I think I have another bug/issue in ISE 2.1. I don't have time to open up TAC cases on these display issues so I hope you don't mind me continuing to give feedback via the Communities forum.
The Live Logs are not displaying the Network Device for repeated authentication records. The first screen shots shows two records for repeat 802.1x authentications. The switch port field is filled in but not the network device name.
If you hit details on the record the network device name is there:
So the Live Log looks to be not extracting this field into the display properly. This is annoying when you are doing switch based filtering in the Live Log and you miss all the repeat authentications.
I am running Patch 1.
Thanks.
