We have not updated to 1.2.1 yet and are running 126.96.36.1999. the only changes made to the system was alarm settings, which was just adding emails to alarm notification in settings.
Four hours after the alarm notif. change we started gettings alerts that ISE had not had any authent requests, 2 days later it shows no records in LIve authent or live sessions 4 hours after the change. All subfeilds at the top(i.e., Misconfigured Network Devices, Repeat Counters) are all zero as well. Authentication still SEEMS to be working, i am still able to log into network devices and users are still getting domain access so we are really puzzled as to why nothing is being reported in the logs. On the home page of ISE, it also shows the system summary as "no data available" and we get "no heartbeat" alarms continuously and Critical : health status alerts.
Symptom: Issue with the Live dashboard in ISE 1.1.4 not displaying information and only showing "No Data Available".
The Dash Board will run and work for awhile, but it will randomly stop updating any statistics on the dashboard.
Data will show and is seen in the database, but never updates per incoming/outgoing endpoints.
Live authentications will work fine as well as all users are able to be authenticated. Customer reports do not produce data.
Seen on multiple customer's deployments with fresh installs, a fresh install with a backup from a previous 1.1.x version, as well as upgrading to 1.1.4 from any earlier 1.1.x version.
Conditions: Cisco ISE 1.2 or 1.1.4
Distributed or single node deployment.
Workaround: The workaround that fixes this M&T corruption is to enter the following commands below:
ms-ise-mgm01/admin# app config ise
Selection ISE configuration option Reset Active Directory settings to defaults Display Active Directory settings Configure Active Directory settings Restart/Apply Active Directory settings Clear Active Directory Trusts Cache and restart/apply Active Directory settings Enable/Disable ERS API Reset M&T Session Database Rebuild M&T Unusable Indexes Purge M&T Operational Data Reset M&T Database Refresh M&T Database Statistics Display Profiler Statistics Exit
We need to select the following options:
7 to reset the session db 10 to reset the M&T database 11 to refresh the statistics (Possibly do not need. Was only needed in 1 case.)
Once you have run these commands the DashBoard should begin to display information.
This process can take up to 12 hours to complete all three steps. Roughly 1 to 3 hours per option selected.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...