CUCM logs

[Bekzod Fakhriddinov]

HI, can anyone advice which services to look in RTMT ->Trace&Log Central->Collect Files  while troubleshooting SIP trunk ? 

We have sip trunk from CUCM to Nice servers for recording and sometimes im getting alerts from Nice :

The  recorder 'name' has detected an error/warning; 

Error number: 8841; PBS removed target uexpectedly

Thanks

[Ratheesh Kumar]

Hi there

You can use Wireshark and port mirroring as it is real time. 

You can get the CUCM traces from RTMT and enable SIP traces in the CCM Servicabilty.

Below are some excellent guides

https://wiklunds.wordpress.com/2013/06/09/sip-traces-from-cucm-in-transla/

https://supportforums.cisco.com/t5/collaboration-voice-and-video/understanding-cucm-traces-end-to-end/ta-p/3161800

Hope this helps!

Cheers
Rath!

***Please rate helpful posts***

[Bekzod Fakhriddinov]

Its cucm-nice server, no cube, no telephony calls, just call records from cucm to nice. Im looking for logs showing what happened at xx:xx on that sip trunk, maybe even on ip level or hardware level. Alerts didn't show anything maybe they are not correctly set up. But something happened and that sip trunk was affected. Thank you. There must be options to see this by rtmt- collect logs -services but which service i need to check?

[Rajan]

Hi Bekzod,

You cant get much from traces. You can enable and get SIP traces but that wont help much in this scenario. You could also get Event Viewer - Application and Event Viewer - System logs to see if there are any reported events during that time.

But to find the exact cause you need to get captures during that time. As you have a direct trunk from CUCM to NICe, you can get packet captures from CUCM server pointed in the SIP trunk using the below procedure.

https://supportforums.cisco.com/t5/collaboration-voice-and-video/packet-capture-on-cucm-appliance-model/ta-p/3118507

HTH
Rajan
Pls rate all useful posts by clicking the star below

[Chris Deren]

Installing wireshark on NICE server (assuming it's window) might be good start.