Skip to content

[Cisco ISE] Pipeline failing for console logs#18189

Merged
qcorporation merged 7 commits intomainfrom
fix/issue-17972-cisco-ise-pipeline-failing-for-conso-j63
Apr 9, 2026
Merged

[Cisco ISE] Pipeline failing for console logs#18189
qcorporation merged 7 commits intomainfrom
fix/issue-17972-cisco-ise-pipeline-failing-for-conso-j63

Conversation

@qcorporation
Copy link
Copy Markdown
Contributor

Proposed commit message

Implemented a TACACS accounting pipeline hardening fix for cisco_ise.log to prevent non-IP Remote-Address values (console, async, EEM) from causing ingest failures, while still mapping valid IP literals to destination.ip.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Related issues

@qcorporation qcorporation self-assigned this Apr 1, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 1, 2026

✅ Vale Linting Results

No issues found on modified lines!


The Vale linter checks documentation changes against the Elastic Docs style guide.

To use Vale locally or report issues, refer to Elastic style guide for Vale.

@elastic-vault-github-plugin-prod
Copy link
Copy Markdown

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@qcorporation qcorporation marked this pull request as ready for review April 1, 2026 18:49
@qcorporation qcorporation requested a review from a team as a code owner April 1, 2026 18:49
@andrewkroh andrewkroh added documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience] labels Apr 1, 2026
@elasticmachine
Copy link
Copy Markdown

Pinging @elastic/integration-experience (Team:Integration-Experience)

@mjwolf mjwolf requested a review from taylor-swanson April 6, 2026 22:11
@elasticmachine
Copy link
Copy Markdown

💚 Build Succeeded

History

cc @qcorporation

@qcorporation qcorporation merged commit 52f5024 into main Apr 9, 2026
11 checks passed
@qcorporation qcorporation deleted the fix/issue-17972-cisco-ise-pipeline-failing-for-conso-j63 branch April 9, 2026 18:46
@elastic-vault-github-plugin-prod
Copy link
Copy Markdown

Package cisco_ise - 1.32.3 containing this change is available at https://epr.elastic.co/package/cisco_ise/1.32.3/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. Integration:cisco_ise Cisco ISE Team:Integration-Experience Security Integrations Integration Experience [elastic/integration-experience]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[cisco.ise]: Pipeline failing for console logs

5 participants