Views Reference

Overview

ISE DataConnect provides 376+ read-only views. This reference covers the most commonly used views with advanced query patterns.

View Categories

Category Description Documentation

RADIUS Authentication

EAP-TLS, PEAP, MAB authentication records

RADIUS Auth

RADIUS Accounting

Session duration, bandwidth, termination

RADIUS Accounting

Endpoints & Profiling

MAC inventory, profile matching, OUI analysis

Endpoints

TACACS+

Device admin authentication & command audit

TACACS+

Audit & Admin

Configuration changes, admin logins

Audit

Quick Reference

Setup

dsource d000 dev/network

List All Views

netapi ise dc query "
  SELECT view_name, num_rows
  FROM all_views
  WHERE owner = 'ISEAPPDATA'
  ORDER BY view_name
" --format json | jq -r '.[] | .view_name'

Get View Columns

VIEW_NAME="RADIUS_AUTHENTICATIONS"
netapi ise dc query "
  SELECT column_name, data_type
  FROM all_tab_columns
  WHERE table_name = '${VIEW_NAME}'
  AND owner = 'ISEAPPDATA'
  ORDER BY column_id
" --format json | jq -r '.[] | "\(.column_name): \(.data_type)"'

Most Used Views

RADIUS_AUTHENTICATIONS

Primary view for all RADIUS authentication events.

netapi ise dc query "
  SELECT
    TO_CHAR(TIMESTAMP_TIMEZONE, 'HH24:MI') as time,
    CALLING_STATION_ID as mac,
    AUTHENTICATION_METHOD as method,
    PASSED as status
  FROM RADIUS_AUTHENTICATIONS
  WHERE TIMESTAMP_TIMEZONE > SYSDATE - 1/24
  ORDER BY TIMESTAMP_TIMEZONE DESC
  FETCH FIRST 10 ROWS ONLY
" --format json | jq -C '.'

RADIUS_ACCOUNTING

Session records with duration and bandwidth.

netapi ise dc query "
  SELECT
    CALLING_STATION_ID as mac,
    ACCT_STATUS_TYPE as type,
    ROUND(ACCT_SESSION_TIME / 60, 1) as mins,
    ROUND((ACCT_INPUT_OCTETS + ACCT_OUTPUT_OCTETS) / 1024 / 1024, 2) as mb
  FROM RADIUS_ACCOUNTING
  WHERE TIMESTAMP_TIMEZONE > SYSDATE - 1
  AND ACCT_STATUS_TYPE = 'Stop'
  ORDER BY TIMESTAMP_TIMEZONE DESC
  FETCH FIRST 10 ROWS ONLY
" --format json | jq -C '.'

ENDPOINTS

Endpoint inventory with profiling data.

netapi ise dc query "
  SELECT
    MAC_ADDRESS as mac,
    ENDPOINT_POLICY as profile,
    TO_CHAR(UPDATE_TIME, 'YYYY-MM-DD') as last_seen
  FROM ENDPOINTS
  ORDER BY UPDATE_TIME DESC
  FETCH FIRST 10 ROWS ONLY
" --format json | jq -C '.'

Other Notable Views

View Description

POSTURE_ASSESSMENT

Endpoint posture results

GUEST_USERS

Guest portal user data

PROFILER_PROBES

Profiling probe data (DHCP, HTTP, etc.)

SYSTEM_SUMMARY

ISE node health metrics

NODE_LIST

ISE deployment nodes

POLICY_SETS

Policy set definitions

AUTHORIZATION_PROFILES

Authz profile definitions

TACACS_AUTHENTICATION

Device admin login records

TACACS_AUTHORIZATION

Command authorization audit

ADMIN_AUDIT_LOG

Configuration change tracking