Audit log config doubts

[Trying tobeone]

Hi Experts,

Our customer is having CUCM 7.1.3 and was looking for an option to audit the changes made and the user who made the change. I came across the Audit Log feature and have suggested it. But please update whether it has any adverse effect on the server on Call Processing as it will use space as well as CPU.

Please advice and also help in configuring the Audit Log as when i tried on my test lab, and tried to access through RTMT, its showing the error "system iowait currently exceed the current threshold" so please update what all options to be ticked and how much space and how much many files to be configured.
Also if purging is not enabled when the log will be cleared.

Regards
TT

[William Bell]

TT,

No adverse effects on CPU that I am aware of. Unless you set everything to debug level or something silly like that. BTW, audit logs is turned on by default, if that is any indicator of impact.

Re: configuration. I did a write up on this a while back that may help you:

http://www.netcraftsmen.net/resources/blogs/audit-logs-on-cucm.html

As far as configuring audit log retention and purging, I recommend reviewing the following:

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/service/7_1_2/admin/saaulog.html#wp1149145

I wouldn't disable purging.

HTH.

Regards,

Bill