dc admin-logins

Synopsis

netapi ise dc admin-logins [OPTIONS]

Description

Get ISE administrator login events. Track who’s accessing the ISE admin console - security audit essential.

Options

Option Default Description

--hours, -h

24

Hours to look back

--limit, -l

50

Maximum records to return

--admin, -a

(none)

Filter by admin username

Usage

# Last 24 hours (default)
netapi ise dc admin-logins

# Filter by admin
netapi ise dc admin-logins --admin superadmin

# Last week
netapi ise dc admin-logins --hours 168

# More results
netapi ise dc admin-logins --limit 100

Sample Output

Admin Logins (last 24h)
──────────────────────────────────────────────────────────────────────────────
Time                 Admin         IP Address      Interface    Operation
──────────────────────────────────────────────────────────────────────────────
2026-01-23 10:43:21  superadmin    10.50.10.100    Admin        Login successful
2026-01-23 09:15:08  ersadmin      10.50.10.101    ERS          Login successful
2026-01-23 08:02:55  superadmin    10.50.10.100    Admin        Logout

Use Cases

Security Audit

# All admin activity this week
netapi ise dc admin-logins --hours 168 --limit 200

Track Specific Admin

# When did this admin log in?
netapi ise dc admin-logins --admin contractor_admin --hours 720

See Also