How to track who made a change in Call Manager?

[victoriabardy]

Hello All,

I just came back to my desk and my direct dial was gone from my phone.  Apparently someone who is an admin on our call manager accidently deleted my number from the system.  We allow our admins to make changes using their AD account to login to the system.  We are running on Call Manager

System version: 8.5.1.12900-7. How do I go about checking to see who made that change?

Can anyone here on the forum tell me how I go about checking into this?

Please let me know if you do.

Thank you.

Rgds,

Vicky

[jsmcniel88]

We use a product called Variphy to analyze security logs. Very helpfull with audit logging and keeping track of changes made in CUCM.

http://www.variphy.com/home

[victoriabardy]

Thank you for your reply.

Do you know where I can go to check the security logs in Call Manager?  We do have an admin group that has rights to make changes.  I just want to check to see who logged in this afternoon and made this change.

Please let me know.

Thank you.

Rgds,

Vicky

[Jaime Valencia]

Use the audit logs, get them via RTMT.

HTH

java

if this helps, please rate

www.cisco.com/go/pdihelpdesk

[Aman Soi]

Hi Vicky,

You can refer the DOC .You can track through UserID along with IP address from where the change was done. But u won't be able to track Partition and CSS change.

http://www.netcraftsmen.net/blogs/entry/audit-logs-on-cisco-unified-communications-manager-cucm.html

regds,

aman

[tinasmith510]

Give Variphy a shot. Find out which Admin is making changes

http://www.variphy.com/products/enterprises/cisco-audit-log