ISE questions for access

[MikeAoD]

It is possible to have access to the internal log storage of ISE? Or there's any way to access to the underlying linux after installation to gain some access?

[kvenkata1]

Hi Miguel,

What are you looking for? All available troubleshooting commands/logs are documented here & hopefully you'll find what you need.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_011…

[MikeAoD]

Hi Krishnamurthy

Hoping you're doing well, one customer is requesting if there's any way we can access to the underlying system to extract information of the logs or to reconfigure the system. I already answered the that this is not possible due the security in ISE but they wanted me to escalate this topic for a review.

Regards,

Enviado desde mi Samsung Mobile de Telcel

[Jason Kunst]

There a basic commands that we give access to look at the logs another minimally operational tasks. Can you provide more specifics on what they are looking to do.

Sent from my iPhone

[MikeAoD]

Yes, they want to get Access to extract all the log information, actually they were asking for the folder where the logs are stored in the ISE.

Best Regards,

[Arne Bier · Accepted solution]

On each ISE node you can get a lot of raw log information.  There is Linux level logs (aka "system" logs) and ISE application logs

e.g.

sco8834ise054/admin# show logging ?

  >            Output Redirection.

  application  List application log files

  container    Show container logging information

  internal     Show syslog configuration internal

  system       List system log files

  |            Output modifiers.

  <cr>         Carriage return.

e.g. show logging system maillog

will display contents of the Linux /var/log/maillog

[Jason Kunst]

You can also download the logs via the admin UI, this is available in the admin guide

Sent from my iPhone