Hi all,
we have a distributed Cisco ISE deployment with 4 PSN's. We have configured logging to external syslog (Splunk) which works fine. The question is, does each PSN send syslog individually, it seems to be the case. And is there a way to configure PSNs in a primary Data Center to log to a local collector and PSNs in recovery Data Center to log to their local collector?
There is no option in the CLI or the GUI, this is ISE 1.4.