topic Re: Missing field from Splunk for Cisco Identity Services (ISE) logs: AllowedProtocolMatchedRule. in All Apps and Add-ons https://community.splunk.com/t5/All-Apps-and-Add-ons/Missing-field-from-Splunk-for-Cisco-Identity-Services-ISE-logs/m-p/576653#M75643 <P>afaik 3.0p2 (i'm not the admin of ISE)</P> Mon, 29 Nov 2021 19:59:46 GMT d1nd141 2021-11-29T19:59:46Z Missing field from Splunk for Cisco Identity Services (ISE) logs: AllowedProtocolMatchedRule. https://community.splunk.com/t5/All-Apps-and-Add-ons/Missing-field-from-Splunk-for-Cisco-Identity-Services-ISE-logs/m-p/460632#M56668 <P>I have a feeling this question will answer a lot of other questions I have.</P> <P>This field - <CODE>AllowedProtocolMatchedRule</CODE> - is missing from my Cisco ISE logs. The field is needed to populate data in the Cisco ISE App dashboard. But I have no record of this field, even going back to the beginning of time. I'm not sure how to resolve this problem.</P> Wed, 20 May 2020 19:38:17 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Missing-field-from-Splunk-for-Cisco-Identity-Services-ISE-logs/m-p/460632#M56668 TitanAE 2020-05-20T19:38:17Z Re: Missing field from Splunk for Cisco Identity Services (ISE) logs: AllowedProtocolMatchedRule. https://community.splunk.com/t5/All-Apps-and-Add-ons/Missing-field-from-Splunk-for-Cisco-Identity-Services-ISE-logs/m-p/460633#M56669 <P>I'm also having the same problem. Wish I had an answer for you <span class="lia-unicode-emoji" title=":disappointed_face:">😞</span> What version of ISE are you running.</P> Wed, 20 May 2020 20:23:27 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Missing-field-from-Splunk-for-Cisco-Identity-Services-ISE-logs/m-p/460633#M56669 TitanAE 2020-05-20T20:23:27Z Re: Missing field from Splunk for Cisco Identity Services (ISE) logs: AllowedProtocolMatchedRule. https://community.splunk.com/t5/All-Apps-and-Add-ons/Missing-field-from-Splunk-for-Cisco-Identity-Services-ISE-logs/m-p/575983#M75608 <P>Hi,<BR />have the same issue.<BR />You found a way to solve?</P><P>Thanks</P> Tue, 23 Nov 2021 08:26:33 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Missing-field-from-Splunk-for-Cisco-Identity-Services-ISE-logs/m-p/575983#M75608 d1nd141 2021-11-23T08:26:33Z Re: Missing field from Splunk for Cisco Identity Services (ISE) logs: AllowedProtocolMatchedRule. https://community.splunk.com/t5/All-Apps-and-Add-ons/Missing-field-from-Splunk-for-Cisco-Identity-Services-ISE-logs/m-p/576653#M75643 <P>afaik 3.0p2 (i'm not the admin of ISE)</P> Mon, 29 Nov 2021 19:59:46 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Missing-field-from-Splunk-for-Cisco-Identity-Services-ISE-logs/m-p/576653#M75643 d1nd141 2021-11-29T19:59:46Z