RTMT for changes made in Communications Manager

[ryancdavis]

Question:

Under trace & log central -> Collect files:  What setting should select to see changes made on the system by an administrator on CM Administration?

[Rob Huffman]

Hi Ryan,

Access Log

The log contains a file report of access/change attempts. That is, Cisco Unified CallManager Administration generates a record of attempts to access or modify any directory or database component through Cisco Unified CallManager Administration. The change record includes the user name, date, time, window from which the change was made, and the success or failure status of the update.

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/admin/5_1_3/ccmsys/a02mla.html#wp1025731

The Trace File for MLA, Via RTMT (Trace Files) is where you will find the Logs;

Trace tab -> Trace & log central -> Collect files -> Cisco Role Based Security

Cheers!

Rob

[ryancdavis]

That's very helpful, thanks.

Is there a way to see what changes were made?

[David Hailey · Accepted solution]

Getting down to what was actually done and piecing all the parts together is a more than convuluted process.  My short answer to you would be No.  The real answer is Yes but you are going to spend A LOT of time pulling data from various DB tables, Tomcat logs, and you also need to be quite proficient with leveraging AXL/SOAP to query data from the CUCM.  Then you need to parse the data and put it all back together to get to exact info you need.  Our practice lead has done this in the past for a customer but it is a tedious task (which is probably an understatement).