How to check registration log on Cisco IP phones on CUCM 9 ?

[amine..dahel]

Hi everybody,

I'm working on CUCM 9, I need to check registration log for a CIPC remotely for an investigation that I'm conducting.

Can you, guys, show how to check the registration log of a cisco IP phone?

Thanks in advance

[Carlo Poggiarelli]

Hi Amine.

On CUCM cli you can use show risdb query phone to show the phone status registration and the last transition timestamp

Regstatus is the actual registration status of the phone and RegStatusChgTimestamp is the  date and time when the phone passed from a status of unregistered to registered or viceversa.

HTH

Regards

Carlo

[amine..dahel]

I managed to enter the CLI command but I couldn't find the location of the log file created by this cmd.

Can you show me where can I find it and how, please ? 

Thanks in advance, Carlo

[Dennis Mink]

In addition to what Carlo mentioned, you can go to CUCM, search for the relevant phone, click its IP address in CUCM which opens the web pages of the phone itself. This will also give you a log  (although it is sometimes a bit cryptic).

good luck

[amine..dahel]

Thank you Dennis for the tip ;)

[Muthurani Lavanya Paneerselvam]

Hi Amine

You can look at collecting logs thru RTMT. I would recommend you to download them and then login to RTMT > Double click on the Trace and log central and look up for the event viewer - Application log and Event viewer-System log. you can troubleshoot the IP Phones and IP communicators being unregistered.

Once you have collected them you can see them in Notepad++ using a searching criteria equal to the device name and also the timeframe when the problem happened.
You can also collect them from the SysLog Viewer> Expand Application Logs > then Cisco Syslog, you can see it from there if there's a specific timeframe.Still you can download them when you click on "Save"..

Once you got the information you will see message similar to this - with Device name and Device unregistered status.

Apr 25 13:01:22, JAMES-CCM-1, Error, Cisco CallManager, ccm: 9889781: Apr 25
17:01:22.231 UTC : %CCM_CALLMANAGER-CALLMANAGER-3-DeviceUnregistered: Device
unregistered. Device name.:SEP0024975A58DE Device IP address
[Optional].:10.34.192.135 Protocol.:SCCP Device type. [Optional]:365 Device
description [Optional].:8WDN 10 Reason Code [Optional].:13 Device MAC
address [Optional].:0024975A58DE IPAddressAttributes [Optional].:0 Cluster
ID:StandAloneCluster Node ID:JAMES-CCM-1, 14

Also for troubleshooting IP Phone Registration, using Status Messages and CUCM/Phone Logs collection and Trace/Logs reading

I would recommend you to go thru the below videos which are really helpful

https://supportforums.cisco.com/video/12212291/troubleshooting-ip-phone-registration

https://supportforums.cisco.com/blog/12088286/troubleshooting-ip-phone-registration-cucm

Regards

Lavanya

[amine..dahel]

Thank you Muthurani for your very helpful answer.

[saif musa]

Amine, 

Im using wireshark application installed on windows. connecting the pc to our voice network and configuring port mirror on cisco switch that connecting the CUCM. its handy, you can filter log of ip phones based on ip address. 

Regards

[DS3203]

Hi,

Try the tool from this website. It seems pretty good and can fetch the IP phone status along with the IP address.

https://www.networkclan.com/tools/voicetools/

[DS3203]

Hi ,

I came across this site where there is a tool which helps in fetching the registration status of the phones from CUCM along with IP address.

https://www.networkclan.com/tools/voicetools/