A Prometheus Cisco ISE Exporter for the MNT API and ERS API
To run the ise-exporter, as a minimum you need valid ise.yml
. You should also generate a CA bundle (PEM File, base64 encoded) of your certificate chain.
adm_node: server
rest_uid: admin
rest_pw: cisco
docker run -p 9123:9123 -v /home/nick/ise-exporter/my.ise.yml:/etc/ise-exporter/ise.yml -v /home/nick/ise-exporter/my.ca_bundle.pem:/etc/ise-exporter/ca_bundle.pem linickx/ise-exporter
This assumes that prometheus and ise-exporter are on the same host, update as necessary.
- job_name: 'ise'
scrape_interval: 60s
static_configs:
- targets: ['127.0.0.1:9123']
The following settings are optional:
Older ISE servers can be monitored by adding rest_ver: 1
to ise.yml
If you have the ERS API enabled, you can add ers_enabled: True
to ise.yml
to gather more metrics
If you're not using Docker, to run as a local python script you can use a different path for the ise.yml and CA bundle; e.g:
$ export ISE_FILE=my.ise.yml
$ export CA_FILE=my.ca_bundle.pem
$ ./ise-exporter.py
[INFO] * Running on http://0.0.0.0:9123/ (Press CTRL+C to quit)