cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
263
Views
0
Helpful
1
Replies

Collecting logs after a crash

mert demirer
Level 1
Level 1

We have a Call manager 7.1,

It has crashed several times so far and the last time was 10 days ago.

I want to collect logs from the call manager to send to TAC.

I have collected System logs,Application logs,security logs and downloaded install logs using RTMT.

Is there any other logs do I need to download? This is all I can figure out from Troubleshooting guide.

Thanks

Mert

1 Reply 1

gmendivi
Cisco Employee
Cisco Employee

Hello Mert,

The logs you took will be useful indeed:

System logs

Application logs

Security logs

Install logs using RTMT

Please make sure that they cover some time before and after the crash was experienced (although if the server is very active some of them could have been overwritten, normally 30 minutes before and after the crash are a good practice).

On top of those traces, please include the following :

Call Manager (SDI/SDL) traces

Perfmon logs (could be useful if the crash was related to High CPU or high memory utilization) -> Make sure you take data from the last 1-2 weeks to see its progress.

And if the Call Manager did crash, it will be very useful to have the following CLI outputs:

utils core active list
utils core analyze

Also, I suggest you also include these CLI outputs:

show hardware
show environment fans
show environment power-supply
show environment temperatures
show process load
utils diagnose test

I hope it helps,

German