Top ISE alerts to SEIM

[AK50]

Hello everyone, We will be forwarding ISE logs to our SEIM (Helix) I wanted to know what are the top 5-10 logs I should be alerting on? I need to put together an action plan so I cant do that for all the logs. Thankssecurity, Stealthwatch

[kyoshiik]

Please re-post your question at https://community.cisco.com/t5/network-access-control/bd-p/discussions-network-access-control.

This thread is more ISE friendly topics and is watched by ISE experts.