07-02-2013 01:53 PM - edited 03-16-2019 06:11 PM
Hello All,
I just came back to my desk and my direct dial was gone from my phone. Apparently someone who is an admin on our call manager accidently deleted my number from the system. We allow our admins to make changes using their AD account to login to the system. We are running on Call Manager
System version: 8.5.1.12900-7. How do I go about checking to see who made that change?
Can anyone here on the forum tell me how I go about checking into this?
Please let me know if you do.
Thank you.
Rgds,
Vicky
07-02-2013 02:15 PM
We use a product called Variphy to analyze security logs. Very helpfull with audit logging and keeping track of changes made in CUCM.
07-02-2013 02:22 PM
Thank you for your reply.
Do you know where I can go to check the security logs in Call Manager? We do have an admin group that has rights to make changes. I just want to check to see who logged in this afternoon and made this change.
Please let me know.
Thank you.
Rgds,
Vicky
07-02-2013 04:00 PM
Use the audit logs, get them via RTMT.
HTH
java
if this helps, please rate
www.cisco.com/go/pdihelpdesk
07-02-2013 08:10 PM
Hi Vicky,
You can refer the DOC .You can track through UserID along with IP address from where the change was done. But u won't be able to track Partition and CSS change.
http://www.netcraftsmen.net/blogs/entry/audit-logs-on-cisco-unified-communications-manager-cucm.html
regds,
aman
07-29-2013 11:12 PM
Give Variphy a shot. Find out which Admin is making changes
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide