dc posture

Synopsis

netapi ise dc posture [OPTIONS]

Description

Get endpoint posture assessment events. See which endpoints passed/failed compliance checks (AnyConnect agent, antivirus, patches, etc.).

Options

Option Default Description

--hours, -h

24

Hours to look back

--limit, -l

50

Maximum records to return

--status, -s

all

Filter: all, compliant, noncompliant

Usage

# Last 24 hours (default)
netapi ise dc posture

# Non-compliant endpoints only
netapi ise dc posture --status noncompliant

# Compliant only
netapi ise dc posture --status compliant

# Last week
netapi ise dc posture --hours 168

Sample Output

Posture Events (last 24h)
──────────────────────────────────────────────────────────────────────────────
Time                 MAC                User         Status       Policy         OS              AV
──────────────────────────────────────────────────────────────────────────────
2026-01-23 10:43:21  3C:EC:EF:43:50:42  jsmith       Compliant    Corp_Policy    Windows 11      Yes
2026-01-23 10:41:08  70:15:FB:F8:47:EC  contractor   NonCompliant Corp_Policy    Windows 10      No

Use Cases

Compliance Report

# Non-compliant devices this week
netapi ise dc posture --status noncompliant --hours 168

Investigate Endpoint

# Why is this endpoint non-compliant?
netapi ise dc --format json posture --status noncompliant | jq '.[] | select(.mac_address | contains("3C:EC"))'

See Also