Guest

Preview Tool

Cisco Bug: CSCul99532 - ISE syslog messages should be consistent

Last Modified

Feb 27, 2018

Products (1)

  • Cisco Identity Services Engine

Known Affected Releases

1.2(0.899)

Description (partial)

Symptom:
ISE can send configuration audit log to external syslog servers via TCP syslog for monitoring.

It was found that when we update/create/delete MAC address via ERS API, the log message contain linefeed character which results in parsing error on destination syslog servers. 
One more observation is that there is no linefeed in config audit log when we update/create/delete Internal User accounts via ERS API.

Conditions:
NA.

Related Community Discussions

ISE Logging to a syslog (user login 802.1x)
Dear community, I trying to figure out how I can ensure the messages I get in the section Operations > Authentications goes to a syslog. I tried several severity and messages from Admin > Logging > Logging Categories But I'm not able to get when someone auth with his IP / MAC and the associated details...same goes when he is not able to auth... In ISE I can clearly see that coming with full details but no way to have that redirected to a syslog... I someone able to help me out with this? thanks a ...
Latest activity: Feb 08, 2014
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.