ISE 1.3 identity purge logging

Hello,
we just configured identity purge for our endpoints on our ISE 1.3 Patch 2 deployment. We have a distributed environment with two PAN, two MNT and severl other PSN nodes. Which log-file can verify if the operation was successful and what was done?
Best regards
Paul

for data purge

Similar Messages

In r12 What is use of Purge log and Closed system alerts

Hi
In r12 What is use Concurrent reqest "Purge logs and Closed system alerts "
is there any diffrence with "Purge Concurrent Request and/or Manager Data Program"
we have to purge cm logs and data.
'

In r12 What is use Concurrent reqest "Purge logs and Closed system alerts "The concurrent program "Purge Debug Log and System Alerts" (Short name: FNDLGPRG) is the recommended way to purge messages. This program purges all messages up to the specified date, except messages for active transactions (new or open alerts, active ICX sessions, concurrent requests, and so on). This program is by default scheduled to run daily and purge messages older than 7 days. Internally this concurrent program invokes the FND_LOG_ADMIN APIs, which are described later in this document.
Oracle® Applications Supportability Guide Release 12
http://download.oracle.com/docs/cd/B40089_09/current/acrobat/120fndsupp.pdf
is there any diffrence with "Purge Concurrent Request and/or Manager Data Program" This concurrent program is used to purge concurrent requests log/out file, and/or CM log files.
we have to purge cm logs and data.Use "Purge Concurrent Request and/or Manager Data" concurrent program.

Purging logs

Hi all.
I'm sending back an s650 we've been testing for one month.
Now that I've reset its configuration, how can I purge logs ?
Thanks,
Nicolas.

Well, I ended up removing the log files through FTP.
I'm quite surprised I cound no find any "clean it all up" command.
Did I miss it ?

CIsco ISE 1.2 Identity GUEST

HI there.
I already have guest solution on my ISE installation. With Sponsor and guest portal enabled. All guest users are created by sponsores with expiration time of 1 day. This one works fine. (All guest users are on Wireless)
I want to create one "special" guest account that dosent have any expiration time. But I am not sure how to separate that user from the other guest users, how can I build guest authz. policy that can differentiate between guest users?
Thanks,

you could create an ISE local user with a GUEST membership and provided you have your ISE password policy set so that it doesn't expire accounts, etc it would be a "permanent" guest account. we do something similiar. sponsors make temporary accounts while long-term or test guest accounts are created in the ise local identity store as guests and are processed the same way. you just have to ensure that the internal user store is part of your guest identity source sequence.

ISE Best Practice for Purging Endpoints

Maybe I haven't looked long enough or deep enough through the documents and guides, but I am wondering if there is a best practice for purging endpoints in general. For my guest endpoints, I have it set to purge those endpoints every 3 days. When i look at how many endpoints I have profiled at the current time, its a very large number of devices. I'm sure there is a large number of these that are no longer connecting to our network and probably won't in the future.
If there isn't a current best practice, would it sound logical to purge every 180 to 190 days? We are a public school district and we have 180 instructional days. Employees and students alike are able to bring their own devices. I figure with 190 day purge, it would cover the time that employees and students are in session.
Thoughts, opinions?
Thank you for your time.
Kevin

A lot of vendors will suggest also to have one SSID if possible, but the rule of thumb is 3-4 max. The main issue is the differences required for specific WLAN's, which isn't just for Data and Voice, but you also have to look at mDNS, multicast, 802.11r, DTIM's, MFP, etc. You can combine all devices to use one, but all the features/setting will be the same, which isn't ideal all the time. There are attributes which you can set from ISE to push out to the WLC(s), but its the other unique values that you need to research and understand.

ISE 1.3 Identity Group

Hello,
in the old ISE 1.2 my guest users (created by the sponors portal) where put into a own created identity group called RU2_id_grp.
How can I realize this on ISE 1.3. In ISE 1.3 the users fall always into the GuestType_Group which was created by the ISE.
I need the sepearete groups for my authorization policy.
Regards
filip

OK, then DESELECT the option above and do this:
Navigate to Guest Access > Settings > Guest Locations and SSIDs. Enter the locations to which your sponsors will assign guests:
Remember to Save.
Now to Guest Access > Configure > Sponsor Groups. Click Create:
Once you place your cursor in the text box for Select the locations that guests will be visiting, you will see the locations you created in the last step.
Now assign the User Group to be associated with this Sponsor Group by clicking the Members... button:
Click OK, then Save.
This should do it for you.
Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.
Charles Moreton

ISE and capturing web traffic logs

We have guests that visit our office and connect to the Guest WiFi. We want to implement ISE for the self-sign in portal. That would help us determine the user and accept the legal terms without involving IT.
When a guests logs in and surfs the web, We want to track which websites they go to for legal purposes and hold that information for 18 months. I am not sure how I can achieve this part.
The guests may visit it us 1 or 2 times every 6 months so using WSA with AD auth, for example, would not be ideal and that's why we like the ISE portal.
We are using Cisco 5500 WLC's.
Any help is appreciated.

By the way, i feel the document example is a bit too general. For example, if you implement the document, ISE will do web authentication and redirection even when you are using a 802.1X client and are authenticated (and you have no other rules in your Autorization sequence table)
I managed to prevent this by adding an additional condition to the first rule "MAC not known" that has the CentralWebAuth policy. Only do webautentication if MAC not known AND Wired_MAB is being used.

ISE Guest Accounting Identity

Hello Guys,
i have an ISE 1.2 with Patch 9 installed.
Now i want to have a correlated View of Guest User Name <-> IP Address
When i go under Operations -> Reports -> Guest Accouting i just get the MAC Adress as Identity Value. Is there any configuration i can made to show the GuestUser as Identity ?
I added a picture of my corrent output
Thanks
Philip

Guest user Identity is getting updated with Mac addr. instead identity
CSCuh14138
Description
Symptom:
Guest user Identity is getting updated with Mac. address instead of identity in Guest accounting reports.
Conditions:
issue is seen in Guest accounting reports
Workaround:
no work around
Known Affected Releases:
(4)
1.2(0.852)
1.3(0.566)
1.3(0.620)
1.2(0.899)

Purging Log files

Hi
I am working on creating a shell scripts to delete old log application log files . Could someone help me what are the log files to be purged in an oracle applications.
Currently I am purging
udump/bdump/adump directory old files
$APPLCSF/tmp,log and out directory old files
tmp files in utl_file_directory
Two weeks old archieve files
Is there anything i am missing out.... in apache side .
Thanks
Rajan

For Concurrent Manager log files, it is recommended you use "Purge Concurrent Request and/or Manager Data" concurrent request with "Entity = ALL" parameter.
For other log files, check Note: 274666.1 - Cleaning An 11i Apps Instance Of Redundant Files
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=274666.1

Grid Control 10g Purge log files

Hi,
I want to know which log files/directories I can clean without stopping/affecting the OMS? I have cleaned couple but not sure what is the complete list. Its 10.2.05 grid control.
Thanks.
Edited by: gbyte2001 on 2-Jun-2012 9:03 AM

Except the current version of the log files (e.g., those without the .xxxxxxxxxx extension), you can remove those in the following directories:
$ORACLE_HOME/Apache/Apache/logs
e.g.; remove access_log.xxxxxxxxxx and keep the access_log file file
$ORACLE_HOME/webcache/logs
$ORACLE_HOME/sysman/log
Also, you keep an eye on the sizes of the files in the following directories. If necessary, purge them when the OMS is stopped.
$ORACLE_HOME/j2ee/OC4J_EM/log/OC4J_EM_default_island_1
$ORACLE_HOME/j2ee/OC4J_EMPROV/log/OC4J_EM_default_island_1
$ORACLE_HOME/opmn/logs
Regards,
- Loc

Purging Logs for AS Database

Does anyone know of any way to purge AS database logs based on a "time" setting as opposed to a "size" setting?

According to the fine Oracle® Utilities Application Framework Administration Guide Chapter 17, "Archiving and Purging" is readily available to CC&B.

Purged logs on Unity and Call Manager

Some time I see diferent hard disk are full or closer to be full. When I check confirm so a lot of logs file are create, my undecitions, What is/are the logs file that I must be delete en my servers ( Unity and Pub/Susb )
I like to implement a script to auto purge, I don't know.

I can not speak to Unity but CCM will purge logfiles & not fill the drive if configured properly. YOu need to go to the CCM Serviceability page and adjust the number of retained logfiles for eack service so the drive does not fill. By default each service will keep 250 files 10000 lines long.
There are a couple of things that consume disk space on the CCM. You shoud also check the SQL DB transaction logs to make sure they are not growing. Also ensure that you are purging the CDR & ART DBs
Mike

PURGE LOG: Dependencies before purging

Hi,
I want to purge all my log files, can anyone tell me the dependencies before i perform the said procedure? Thank you

base on my experience Application server contain csc history and Essbase server logs contain essbase activity such as starting app, starting db on essbase. When Essbase server log to long and reach maximum size it wouldn't be starting up essbase db. I think PURGE this log is okay as long as you stoping your essbase services

Unable to delete / Purge Log History

Hi,
There are some logs in my runbook that are there for the past 6 months and when i try deleting them, the system throws an error "idispatch error #3121 (8004021e31)".
Is there any other way to have it deleted maybe from SQL.
Kindly help....

Hi,
select the Orchestrator DB in SQL Management Studio when running the statement, or
use Orchestrator
exec sp_CustomLogCleanup 1,5 /* to keep the last 500 entries per Runbook */
exec sp_CustomLogCleanup 2,7 /* to keep the last 7 days per Runbook */
Regards,
Stefan
www.sc-orchestrator.eu ,
Blog sc-orchestrator.eu

ISE max-login-ignore-identity-response

Hi forumers'
Greeting, I had a question regarding ISE login identity response.
In my POC deployment, i'm using a single testing domain user account at the testing Active Directory. I able to login to the testing's secure network using the same user credential over normal workstation and handheld device (Ex: iphone, ipad etc), SIMUTANEOUSLY.
How do i can strengthen the authorization policy where
1. ISE max-login identity response only allow to 2 concurrent connectivity on maximum one user per workstation and/or handheld device.
example:
AD user-A conencting to 1 unit of workstation and 1 unit of iPhone at the same time. If user-A trying to connect another iPad this time should make the connection fail.
Can i fine tune and strengthen on this, thanks
Noel

I have had the same issue, the fault is caused by the time zone in the sponsor groups being set by default to UTC, so if you are in London the accounts wont become available until UTC time. The best practice is to add a local time zone and remove UTC at initial configuration
To resolve this create a new local time zone in Guest Access>Settings>Guest Locations and SSIDs then under Guest Access>Configure>Sponsor Groups amend the time zone properties in each sponsor group
One other problem is if you do not remove this at initial configuration you don't seem to be able to get rid of UTC, not really an issue unless you forget when creating new sponsor groups

ISE 1.3 identity purge logging

Similar Messages

Maybe you are looking for