Few radius logs are missing while searching for them in report

Bvbharath · ‎10-13-2022

I was looking for old logs in Cisco ISE (2.2version)of a specific user and when i have tried i wasn't able to find any logs as infact I know that there were many failed authentication of him yesterday but when i go to report and search them in Radius authentication logs i am not finding a single log of his and many other users.

Is this a known bug? And how to resolve this issue?

balaji.bandi · ‎10-14-2022

is this only for this users, not any logs?

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Bvbharath · ‎10-14-2022

No it's for many user's.

Rich R · ‎10-15-2022

Yes there were definitely bugs that caused no logging - we encountered that with TACACS so probably also affects radius logs. We had to upgrade and I think TAC also had to fix something in the database. Best to make sure you're upgraded to the latest release and if still not working then contact TAC and they'll help you fix it.

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.190.0, latest 9800 releases, 8.5.182.11 (8.5 mainline) and 8.5.182.108 (8.5 IRCM)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs

Rich R · ‎10-15-2022

There are also some bugs causing ISE to log with dates thousands of years in the future so you can't find them because the date is wrong. Again you need TAC assistance (and fixed software version) to resolve this because it definitely requires a reset on the database which TAC will do for you.

And there's this one https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg95454 - needs latest software release to resolve.

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.190.0, latest 9800 releases, 8.5.182.11 (8.5 mainline) and 8.5.182.108 (8.5 IRCM)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs