CUCM 6.1.3 User activities Auditing

[youssef.ahmed]

I need to know the configuration on CUCM done by users loged in to my CUCM.

For example :

user x changes css for 2000 at 1/1/2010

I need to know who user "x"

How I can get those info?

[David Hailey]

Read the following for more info:

http://www.netcraftsmen.net/resources/blogs/audit-logs-on-cucm.html?blogger=William+Bell

Hailey

Please rate helpful posts!

[William Bell]

Good link

However, the auditing capability discussed in the link isn't included in 6.1.3. It was added to 7.1.2 and later. That being said there still are traces you can look at. The problem is nothing is going to give the OP a record that says: "person X changed css Y on DATE-TIME". You would have to piece it together using the tomcat logs as a primary source of data. Even then, you need to know the pkid of the CSS (for example) in the database so that you can decipher the URIs stored in the tomcat web logs. Very hairy business.

If you want to give it a go, check out the tomcat logs here:

admin:file list activelog tomcat/logs/localhost* detail

HTH.

Regards,

Bill

[youssef.ahmed]

Yes,good link.

But now how i can know the pkid of my CSSs?

BR,

Ahmed Kamal

[youssef.ahmed]

i found that css has "pkid/name a1dd95eb-3d5c-e6a9-d1b8-6b7719c9e1af" as pkid.

Did all CSSs have the same pkid or it differs per CSS name?

[William Bell]

Ahmed,

Each CSS will have a different pkid. The pkid (private key identifier?) is a unique value in each table of the database. It is also used to link tables to each other. I put together a high level primer on the db tables, pkid, and relationships in my blog:

http://www.netcraftsmen.net/resources/blogs/running-sql-queries-on-cucm-6x7x-using-axl-soap-toolkit-part-1.html

Just in case you are interested.

Now, a more direct response to your question. You can find out the calling search space with this pkid from the cli of any CUCM cluster node:

admin: run sql select name from callingsearchspace where pkid='a1dd95eb-3d5c-e6a9-d1b8-6b7719c9e1af'

OR (easier and quicker)

admin: run sql select pkid, name from callingsearchspace where pkid like '%6b7719c9e1af' (or similar "like" filter)

HTH.

Regards,

Bill

Please remember to rate helpful posts.

[youssef.ahmed]

i got the following error as per attachment.

[William Bell]

You are entering the command incorrectly.

admin: run sql select name from callingsearchspace where pkid='a1dd95eb-3d5c-e6a9-d1b8-6b7719c9e1af'

OR

admin: run sql select pkid, name from callingsearchspace where pkid like '%6b7719c9e1af' (or similar "like" filter)

You need to tell SQl what you want to select, where you want to select it from, and what to filter on. Also, you must put the single quotes (') around the search string (at least in this case).

Try it again using the correct syntax and see if that helps. Let me know if it works or if you need more assistance.

Regards,

Bill