cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6824
Views
0
Helpful
5
Replies

How to track who made a change in Call Manager?

victoriabardy
Level 4
Level 4

Hello All,

I just came back to my desk and my direct dial was gone from my phone.  Apparently someone who is an admin on our call manager accidently deleted my number from the system.  We allow our admins to make changes using their AD account to login to the system.  We are running on Call Manager

System version: 8.5.1.12900-7. How do I go about checking to see who made that change?

Can anyone here on the forum tell me how I go about checking into this?

Please let me know if you do.

Thank you.

Rgds,

Vicky

5 Replies 5

jsmcniel88
Level 4
Level 4

We use a product called Variphy to analyze security logs. Very helpfull with audit logging and keeping track of changes made in CUCM.

http://www.variphy.com/home

Thank you for your reply.

Do you know where I can go to check the security logs in Call Manager?  We do have an admin group that has rights to make changes.  I just want to check to see who logged in this afternoon and made this change.

Please let me know.

Thank you.

Rgds,

Vicky

Use the audit logs, get them via RTMT.

HTH

java

if this helps, please rate

www.cisco.com/go/pdihelpdesk

HTH

java

if this helps, please rate

Hi Vicky,

You can refer the DOC .You can track through UserID along with IP address from where the change was done. But u won't be able to track Partition and CSS change.

http://www.netcraftsmen.net/blogs/entry/audit-logs-on-cisco-unified-communications-manager-cucm.html

regds,

aman

tinasmith510
Level 1
Level 1

Give Variphy a shot. Find out which Admin is making changes

http://www.variphy.com/products/enterprises/cisco-audit-log