Security Compliance

Cisco ISE connector configuration in SEM

Cisco ISE data not being collected, or may not appear as standard syslog traffic.

First published date

10/8/2018 9:25 PM

Last published date

5/29/2019 7:23 PM

Overview

This article applies to Security Event Manager (formerly Log & Event Manager).

Cisco ISE data is not being collected, or may not appear as standard syslog traffic.

Product section

Security Event Manager

Resolution

Open a web browser to Cisco ISE, and configure it for larger packets: Set the max length = 8192.

The following is just an example, as the IP should be the SEM, the port should be 514, and specify the Facility Code 'syslog filename'.

Ensure your connector is configured correctly in SEM.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.