I’m working on implementing a real-time configuration change tracking dashboard using Cisco ISE (Operations > System 360 > Settings) or Cisco DNA Center. The goal is to visualize configuration changes made within the last 5 minutes for audit purposes.
Key Requirements:
User Identity: Who performed the change
Device Details: Which network device was modified (e.g., switch, router)
Change Summary: What configuration/command was applied
Timestamp: When the change occurred
We are exploring integration with Elastic (ELK stack), which relies on Log Analytics for data processing and visualization. Since Elastic offers options for tables and visual content creation, we would like to understand:
What metrics, logs, or APIs are available from Cisco ISE or DNAC to support this use case?
Are there any best practices or reference examples for integrating Elastic with Cisco ISE/DNAC for real-time monitoring?
Can the native logging and telemetry features in ISE or DNAC be forwarded or transformed to work effectively with Elastic?
Any suggestions, architectural insights, or documentation.
