This document is intended for Cisco Engineers, Partners and Customers deploying Splunk-for-ISE Add-on & Cisco Identity Service Engine (ISE) 2.4+ (use current recommended release). The reader should be familiar with Splunk and ISE. It is assumed that Splunk Enterprise 7.x+ (8.x preferred) has been installed.
The purpose of this guide is to showcase the 2 applications available in Splunkbase to use with Cisco ISE Syslog. There was an application version before this that used pxGrid 1.0 and EPS (endpoint protection services) to quarantine devices. This functionality has been deprecated by Splunk.
This is the application used to collect and process information from ISE syslog so that it can be used in its queries/consoles, for more detailed information see the information listed under the application link for the configuration, etc.
Have a customer that is currently running VSOM 7.9. Majority of their cameras has a "Red X" next to the cameras that are in critical state. Not able to see the live view of the cameras. The cameras are connected to the network and respon...
ISE VM deployment is configured in the network with the ID 192.168.X.X, it's management interface Gig0 is from this network as well, I would like to connect the network with the ID 10.4.4.X with ISE to use RADIUS and TACACS services, is it possible to do ...
Our external interface (1/1), is bouncing/disconnecting. How can I monitor the interface through the CLI to look for errors?I have run the "show interface g1/1 stats" (and other options), but I don't see CRC errors, or other errors.-newbiftd
I'm running an Ubuntu based OS (PopOS) and I use a proxy on my local network (not on localhost, but on the local network here).I've configured the proxy in my Network Settings, but Cisco AnyConnect isn't picking them up. There are no obvious settings in A...