Cisco Identity Services Engine (ISE) 2.7.You should be using the latest recommended versions and patches recommended by the vendor and ISE team. Note: these are the components used when making this document. Switch or WLC configured for AAA Authentication.Splunk 7.x+ (8.x preferred) with Splunk for Cisco Identity Services Engine and Splunk Add-On for Cisco Identity Services Engine.Cisco Identity Services Engine (ISE) 2.4 or higher (please validate latest recommended release).This is used for showcasing of the data received from ISE.It is a community based application and not supported by Cisco or Splunk. ![]() Splunk for Cisco Identity Services (ISE). This is the application used to collect and process information from ISE syslog so that it can be used in its queries/consoles, for more detailed information see the information listed under the application link for the configuration, etc.It is supported by splunk but not Cisco.Splunk Add-on for Cisco Identity Services. ![]() There are two applications that are used in this walk-through: Note: Always check with ISE and Splunk team on current recommended releases This functionality has been deprecated by Splunk.įor more information, troubleshooting and upgrade, see the associated product documentation for the app There was an application version before this that used pxGrid 1.0 and EPS (endpoint protection services) to quarantine devices. The purpose of this guide is to showcase the 2 applications available in Splunkbase to use with Cisco ISE Syslog. It is assumed that Splunk Enterprise 7.x+ (8.x preferred) has been installed. The reader should be familiar with Splunk and ISE. ![]() This document is intended for Cisco Engineers, Partners and Customers deploying Splunk-for-ISE Add-on & Cisco Identity Service Engine (ISE) 2.4+ (use current recommended release).
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |