DataConnect Views Reference
Overview
ISE DataConnect exposes 70 Oracle views providing read-only access to operational data. This reference documents column schemas, data types, and JOIN relationships.
| Category | Views | Use Case |
|---|---|---|
|
Auth troubleshooting, success rates |
|
|
Session duration, data usage |
|
|
Device inventory, profiler data |
|
|
Device admin, command audit |
|
|
Compliance, change tracking |
|
|
Policy definitions |
|
|
Identity store config |
Quick Schema Discovery
# List all views
netapi ise dc query "SELECT view_name FROM all_views WHERE owner = 'DATACONNECT' ORDER BY view_name"
# Get columns for a view
netapi ise dc query "SELECT column_name, data_type FROM all_tab_columns WHERE table_name = 'RADIUS_AUTHENTICATIONS' ORDER BY column_id"
# Sample data from any view
netapi ise dc query "SELECT * FROM RADIUS_AUTHENTICATIONS FETCH FIRST 3 ROWS ONLY"
JOIN Relationships
The primary key for joining endpoint-related data is MAC address:
RADIUS_AUTHENTICATIONS.CALLING_STATION_ID ←→ ENDPOINTS_DATA.MAC_ADDRESS
RADIUS_AUTHENTICATIONS.CALLING_STATION_ID ←→ PROFILED_ENDPOINTS_SUMMARY.ENDPOINT_ID
RADIUS_AUTHENTICATIONS.CALLING_STATION_ID ←→ RADIUS_ACCOUNTING.CALLING_STATION_ID
Common JOIN Patterns
Auth + Endpoint Profile
netapi ise dc query "
SELECT
r.CALLING_STATION_ID AS mac,
r.USERNAME,
r.PASSED,
e.HOSTNAME,
p.ENDPOINT_PROFILE
FROM RADIUS_AUTHENTICATIONS r
LEFT JOIN ENDPOINTS_DATA e ON r.CALLING_STATION_ID = e.MAC_ADDRESS
LEFT JOIN PROFILED_ENDPOINTS_SUMMARY p ON r.CALLING_STATION_ID = p.ENDPOINT_ID
WHERE r.TIMESTAMP_TIMEZONE > SYSDATE - 1
ORDER BY r.TIMESTAMP_TIMEZONE DESC
FETCH FIRST 20 ROWS ONLY
"
Auth + Accounting (Session Duration)
netapi ise dc query "
SELECT
r.CALLING_STATION_ID AS mac,
r.USERNAME,
r.TIMESTAMP_TIMEZONE AS auth_time,
a.ACCT_SESSION_TIME AS session_seconds,
a.ACCT_INPUT_OCTETS + a.ACCT_OUTPUT_OCTETS AS total_bytes
FROM RADIUS_AUTHENTICATIONS r
JOIN RADIUS_ACCOUNTING a ON r.CALLING_STATION_ID = a.CALLING_STATION_ID
AND r.SESSION_ID = a.SESSION_ID
WHERE r.TIMESTAMP_TIMEZONE > SYSDATE - 1
AND a.ACCT_STATUS_TYPE = 'Stop'
ORDER BY a.ACCT_SESSION_TIME DESC
FETCH FIRST 20 ROWS ONLY
"
Endpoint + All Related Data
netapi ise dc query "
SELECT
e.MAC_ADDRESS,
e.HOSTNAME,
e.ENDPOINT_IP,
p.ENDPOINT_PROFILE,
p.IDENTITY_GROUP,
(SELECT COUNT(*) FROM RADIUS_AUTHENTICATIONS r
WHERE r.CALLING_STATION_ID = e.MAC_ADDRESS
AND r.TIMESTAMP_TIMEZONE > SYSDATE - 7) AS auth_count_7d
FROM ENDPOINTS_DATA e
LEFT JOIN PROFILED_ENDPOINTS_SUMMARY p ON e.MAC_ADDRESS = p.ENDPOINT_ID
WHERE e.HOSTNAME IS NOT NULL
ORDER BY e.MAC_ADDRESS
FETCH FIRST 50 ROWS ONLY
"
All 70 Views
Complete View List
| View | Category |
|---|---|
|
Diagnostics |
|
System |
|
Threat |
|
Audit |
|
Audit |
|
Guest |
|
Policy |
|
Audit |
|
Threat |
|
Endpoints |
|
Endpoints |
|
Endpoints |
|
Identity |
|
Identity |
|
Identity |
|
Identity |
|
Identity |
|
Identity |
|
Identity |
|
Identity |
|
Identity |
|
System |
|
Guest |
|
Guest |
|
System |
|
Endpoints |
|
Network |
|
Network |
|
Identity |
|
Network |
|
Network |
|
System |
|
Audit |
|
Policy |
|
Posture |
|
Posture |
|
Posture |
|
Posture |
|
Posture |
|
Guest |
|
Endpoints |
|
Endpoints |
|
System |
|
Accounting |
|
Accounting |
|
Authentication |
|
Authentication |
|
Authentication |
|
Authentication |
|
Endpoints |
|
Policy |
|
Policy |
|
Guest |
|
System |
|
System |
|
TACACS |
|
TACACS |
|
TACACS |
|
TACACS |
|
TACACS |
|
TACACS |
|
TACACS |
|
TACACS |
|
Threat |
|
Policy |
|
Policy |
|
Policy |
|
Identity |
|
Audit |
|
Threat |
See Also
-
Raw SQL Queries - Query syntax and examples
-
SQL Cookbook - Real-world query patterns
-
Full Schema Spec - Complete column definitions