dc trends

Synopsis

netapi ise dc trends [OPTIONS]

Description

Get hourly authentication trends - see auth volume and success rate over time. Perfect for identifying patterns, detecting anomalies, and capacity planning.

Options

Option Default Description

--hours, -h

24

Hours to look back

Usage

# Last 24 hours (hourly buckets)
netapi ise dc trends

# Last 48 hours
netapi ise dc trends --hours 48

# Last week
netapi ise dc trends --hours 168

# JSON for graphing
netapi ise dc --format json trends

Sample Output

           Auth Trends (last 24h)
┏━━━━━━━━━━━━━━━━┳━━━━━━━┳━━━━━━━━┳━━━━━━━━┳━━━━━━━━━━━┓
┃ Hour           ┃ Total ┃ Passed ┃ Failed ┃ Success % ┃
┡━━━━━━━━━━━━━━━━╇━━━━━━━╇━━━━━━━━╇━━━━━━━━╇━━━━━━━━━━━┩
│ 2026-01-23 00  │    42 │     42 │      0 │ 100.0%    │
│ 2026-01-23 01  │    38 │     38 │      0 │ 100.0%    │
│ 2026-01-23 02  │    35 │     35 │      0 │ 100.0%    │
│ ...            │   ... │    ... │    ... │ ...       │
│ 2026-01-23 08  │   287 │    280 │      7 │ 97.6%     │
│ 2026-01-23 09  │   423 │    412 │     11 │ 97.4%     │
│ 2026-01-23 10  │   389 │    385 │      4 │ 98.9%     │
└────────────────┴───────┴────────┴────────┴───────────┘

Use Cases

Identify Peak Hours

# Find busiest hours
netapi ise dc --format json trends | jq '
  sort_by(-.total) | .[0:5] |
  .[] | "\(.hour): \(.total) auths"
' -r

Detect Anomalies

#!/bin/bash
# Alert if any hour has <90% success
PROBLEMS=$(netapi ise dc --format json trends --hours 4 | jq '
  [.[] | select(.success_pct < 90)] | length
')

if [[ "$PROBLEMS" -gt 0 ]]; then
  echo "ALERT: Auth degradation detected in last 4h"
  netapi ise dc trends --hours 4
fi

Grafana Integration

#!/bin/bash
# Export to Prometheus pushgateway
DATA=$(netapi ise dc --format json trends --hours 1)
HOUR=$(echo "$DATA" | jq -r '.[-1].hour')
TOTAL=$(echo "$DATA" | jq -r '.[-1].total')
PASSED=$(echo "$DATA" | jq -r '.[-1].passed')
FAILED=$(echo "$DATA" | jq -r '.[-1].failed')

cat <<EOF | curl --data-binary @- http://pushgateway:9091/metrics/job/ise
ise_auth_total{hour="$HOUR"} $TOTAL
ise_auth_passed{hour="$HOUR"} $PASSED
ise_auth_failed{hour="$HOUR"} $FAILED
EOF

Weekly Pattern Analysis

# Full week - identify daily patterns
netapi ise dc --format json trends --hours 168 | jq '
  group_by(.hour | split(" ")[0]) |
  map({
    date: .[0].hour | split(" ")[0],
    total: [.[].total] | add,
    avg_success: ([.[].success_pct] | add / length)
  })
'

Color Coding

  • Green (95%+): Normal operations

  • Yellow (80-95%): Degraded - investigate

  • Red (<80%): Critical - immediate action needed

See Also