Cisco ISE Miner


Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

L3 Networker

Cisco ISE Miner

I noticed that a new Cisco ISE miner has been released with the latest Minemeld 0.9.28. Can someone give a little bit explanation how does this miner works ? is this miner pulling SGTs from Cisco ISE ? if yes, then what does it do with the tags ? Thanks

L3 Networker

Also see the commit message for more info:

Connect nodes with prototype ers_sgt to sgt_dag, for example:

    inputs: []
    output: true
    prototype: ciscoise.ers_sgt
    - ers_sgt-1477772195510
    node_type: output
    output: false
    prototype: ciscoise.sgt_dag

You need a device list file with the PAN-OS API configuration:

minemeld@minemeld:/opt/minemeld/local/config$ cat sgt_dag-1477848600338_device_list.yml
- hostname:
  api_username: admin
  api_password: admin

- hostname:
  api_username: admin
  api_password: admin

Then you can create DAGs with match criteria using the registered-ips.

admin@PA-200-2> show object registered-ip all

registered IP                             Tags
----------------------------------------  ----------------- 

Total: 4 registered addresses
*: received from user-id agent  #: persistent
L0 Member

Has this been validated with the current version of ISE 2.3? I have tried using the ciscoise.ers_sgt prototype with correct ISE ERS credentials and I keep getting a 401 response back, even though I can validate ISE API access with POSTMAN.

L2 Linker

Is there a document to follow? How to use minmeld to featch info from CiSCO ISE?? please share it.


with regards,


L5 Sessionator

Hi @RamBalaji,


you might want to give the extension a look.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!