cisco ise 1.4 checking authentication via CLI

[Pete C]

i have migrated all NADs from cisco ise 1.4 to 2.7. Because flash is blocked on web browser i am unable to check cisco ise 1.4 to confirm nothing is left trying to authenticate against it.

is there any way via CLI to confirm there are no devices trying to use 1.4 server to authenticate against

thanks

[Peter Koltl]

Apply an ACL in the network and check the hit count.

[hslai · Accepted solution]

Passed Authentications does not log to local store, by default, so you may enable it by going to ISE Admin web UI >  Administration >  System > Logging Categories > AAA Audit > Passed Authentications.

Once enabled, you may check localStore.log in ISE admin CLI as below or download the file(s).

term len 0
show logging app localStore/iseLocalStore.log