cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Walkthrough Wednesdays
451
Views
0
Helpful
3
Replies
Daniov1
Beginner

CUCM Audit log alet

Hi,

I have a lot of alerts generated in my CUCM servers named AuditLogOverFlowDueToLogRotation.
This alert appears every day for a week and does not disappear.

 

I understand that this alert indicates that the audit log overflow occurred. An existing audit log file is overwritten resulting in overflow and eventual loss of audit data.
But it's still generating alert.

 

Any suggest ?

3 REPLIES 3
Mohammed al Baqari
VIP Advisor

Hi, you can configure SFTP server to dump your audit log and clear the
buffer to overcome the problem (assuming that your compliance mandate is to
keep audit logs for a certain time). Also, make sure that you don't have
security flaws. It's not very common to have audit buffer overflow.

Hi Mohammed,

Thanks for your reply.
How can I check what is the reason that this alert generated every day?

 

 

Thanks ,

Danielo. 

>From RTMT you can view audit logs. Here you go.

https://netcraftsmen.com/audit-logs-on-cisco-unified-communications-manager-cucm/

**** please remember to rate useful posts
Content for Community-Ad

Spotlight Awards 2021