Cisco ISE Function Not Working

[macna]

Describe the bug
The "CiscoISEEvent" function included with the Cisco ISE solution parses the data incorrectly, resulting in data appearing in the incorrect columns.

To Reproduce
Steps to reproduce the behavior:

1. Go to Sentinel or Log Analytics
2. Attempt to perform a search using the "CiscoISEEvent" function.
3. See error

Expected behavior
Data to be returned in the correct columns.

Screenshots

Desktop (please complete the following information):

• OS: Windows 11
• Browser: Edge
• Version: 130.0.2849.46

Additional context
I believe this to be the same issue as #10070

[v-sudkharat]

Hi @macna, Did you follow this step as well? - #10070 (comment)
If not, can you check with setting in Cisco side. Thanks!

[macna]

Hi @v-sudkharat - we've checked the configuration in ISE and those options are enabled, as are several others. Are only certain categories supported by this parser?

[v-sudkharat]

@macna, can you send the logs in below mail ID to check the format: [email protected]

[v-sudkharat]

@macna, Waiting for logs to check on this issue. Thanks!