Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco ISE being down alsmost every day for approx. a minute


our monitoring tool says ISE (1.2) is alsmost every night down for about a minute. Mostly it's about 4am (that's where ISE checks if there is something to purge), but mostly it's between 0 am and 4am.

Do you have a idea which logs I could check to see what happened?

(There is nothing wrong with our monitoring system, I was able to distinguish that). So there has to be something with ISE.



Everyone's tags (1)
VIP Purple

What is the criteria use by

What is the criteria use by your monitoring tool to decide ISE is down ? Is it ICMP based ? If ICMP based how many pings fails before declaring ISE is down ?

Is it SNMP based ?

As you already stated, if ISE is doing backups or purging data at given time, system may be busy to respond to your monitoring tool request.




***** Pls rate all useful responses ****

New Member

Hi Rasika,it's ICMP based, if

Hi Rasika,

it's ICMP based, if it's 2 times down for 5seconds each time (so if it's down for 10seconds), the device is considered to be down. Sometimes ISE is down for longer than 1minute.

It has also nothing to do with our network.

I've configured backups 1x per month (operational and configuration logs, but backup is being done not on the same day).

And data purging check is being done every night at 4am, I checked data purging audit log and downtimes, but as I said, downtimes are different. E.g today it was down at 04:51 am and 05:05 am. Then on 30.08 at 03:53am, 03:11am,02:40am,01:29am,00:01am,

then on 29.08 at 11:59 pm, 03:35am,01:36am,05:06am

then on 28.08. at 05:03 and 04:59 (this time it was just the sponsor-page, which wasn't reachable, the IP of the device was pingable) and on the same day also at 04:29am

then on 26.08 at 04:15am

then on 25.08 at 09:28PM


So that's why I need helpful logfiles. Today I went through ALL logs available with command: show logging system, but I couldn't find anything.


CreatePlease login to create content