cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
452
Views
0
Helpful
1
Replies

Log user settings activity

flipton
Level 1
Level 1

We're looking to track user activities of things like changing their the CallFwd settings whether on the phone via soft key or via the Web GUI [e.g.: someone changes CallFwd on another user's phone. Naughty user!].  We're running CUCM 8.5.  I've looked at the RTMT logs and found nothing that might be related to this.  My best guess is in CUCM in the audit log settings: configure syslog to one of the levels but which one? Informational, error, alert, debug: I don't want to overload the remote syslog server.

Any clues provided are greatly appreciated.  Pls/Thnx...Fred

1 Reply 1

Jaime Valencia
Cisco Employee
Cisco Employee

Audit logs only provide information about GUI, if a user changes CFA on the phone it won't show up there.

You would need to review CUCM traces to get that info. You'll see the softkey event and then the DN.

HTH

java

if this helps, please rate

www.cisco.com/go/pdihelpdesk

HTH

java

if this helps, please rate