Views Reference
Overview
ISE DataConnect provides 376+ read-only views. This reference covers the most commonly used views with advanced query patterns.
View Categories
| Category | Description | Documentation |
|---|---|---|
RADIUS Authentication |
EAP-TLS, PEAP, MAB authentication records |
|
RADIUS Accounting |
Session duration, bandwidth, termination |
|
Endpoints & Profiling |
MAC inventory, profile matching, OUI analysis |
|
TACACS+ |
Device admin authentication & command audit |
|
Audit & Admin |
Configuration changes, admin logins |
Quick Reference
Most Used Views
RADIUS_AUTHENTICATIONS
Primary view for all RADIUS authentication events.
netapi ise dc query "
SELECT
TO_CHAR(TIMESTAMP_TIMEZONE, 'HH24:MI') as time,
CALLING_STATION_ID as mac,
AUTHENTICATION_METHOD as method,
PASSED as status
FROM RADIUS_AUTHENTICATIONS
WHERE TIMESTAMP_TIMEZONE > SYSDATE - 1/24
ORDER BY TIMESTAMP_TIMEZONE DESC
FETCH FIRST 10 ROWS ONLY
" --format json | jq -C '.'
RADIUS_ACCOUNTING
Session records with duration and bandwidth.
netapi ise dc query "
SELECT
CALLING_STATION_ID as mac,
ACCT_STATUS_TYPE as type,
ROUND(ACCT_SESSION_TIME / 60, 1) as mins,
ROUND((ACCT_INPUT_OCTETS + ACCT_OUTPUT_OCTETS) / 1024 / 1024, 2) as mb
FROM RADIUS_ACCOUNTING
WHERE TIMESTAMP_TIMEZONE > SYSDATE - 1
AND ACCT_STATUS_TYPE = 'Stop'
ORDER BY TIMESTAMP_TIMEZONE DESC
FETCH FIRST 10 ROWS ONLY
" --format json | jq -C '.'
Other Notable Views
| View | Description |
|---|---|
POSTURE_ASSESSMENT |
Endpoint posture results |
GUEST_USERS |
Guest portal user data |
PROFILER_PROBES |
Profiling probe data (DHCP, HTTP, etc.) |
SYSTEM_SUMMARY |
ISE node health metrics |
NODE_LIST |
ISE deployment nodes |
POLICY_SETS |
Policy set definitions |
AUTHORIZATION_PROFILES |
Authz profile definitions |
TACACS_AUTHENTICATION |
Device admin login records |
TACACS_AUTHORIZATION |
Command authorization audit |
ADMIN_AUDIT_LOG |
Configuration change tracking |