10-13-2022 09:42 PM
I was looking for old logs in Cisco ISE (2.2version)of a specific user and when i have tried i wasn't able to find any logs as infact I know that there were many failed authentication of him yesterday but when i go to report and search them in Radius authentication logs i am not finding a single log of his and many other users.
Is this a known bug? And how to resolve this issue?
10-14-2022 02:10 AM
is this only for this users, not any logs?
10-14-2022 04:10 AM
No it's for many user's.
10-15-2022 03:57 AM
Yes there were definitely bugs that caused no logging - we encountered that with TACACS so probably also affects radius logs. We had to upgrade and I think TAC also had to fix something in the database. Best to make sure you're upgraded to the latest release and if still not working then contact TAC and they'll help you fix it.
10-15-2022 04:10 AM
There are also some bugs causing ISE to log with dates thousands of years in the future so you can't find them because the date is wrong. Again you need TAC assistance (and fixed software version) to resolve this because it definitely requires a reset on the database which TAC will do for you.
And there's this one https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg95454 - needs latest software release to resolve.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: