Missing field from Splunk for Cisco Identity Services (ISE) logs: AllowedProtocolMatchedRule.

[TitanAE]

I have a feeling this question will answer a lot of other questions I have.

This field - AllowedProtocolMatchedRule - is missing from my Cisco ISE logs. The field is needed to populate data in the Cisco ISE App dashboard. But I have no record of this field, even going back to the beginning of time. I'm not sure how to resolve this problem.

[d1nd141]

afaik 3.0p2 (i'm not the admin of ISE)

[d1nd141]

Hi,
have the same issue.
You found a way to solve?

Thanks

[TitanAE]

I'm also having the same problem. Wish I had an answer for you 😞 What version of ISE are you running.