Cisco Meeting Management License utilization spiking up randomly

[MLGertJ]

Hi everyone!

I have stumbled upon a weird situation. For atleast 3 months now I have seen this appearing randomly.
Long story short: When I look my Meeting servers clusters' license utilization in Meeting Management, it is showing random spikes from few used Shared Multiparty Plus licenses to hundreds of used SMP licenses. There is 0 possibility that for days there has been over 160 concurrent conferences...
This problem started in CMS 3.6 and CMM 3.6. I upgraded both to 3.8 and the problem presists. Now I hoped that 3.10 version will fix this issue so I upgraded CMM to 3.10.0.26 but no change. Will upgrade CMS to 3.10 also this week.
I also reinstalled my CMM from scratch but when I added my CMS cluster back then it showed Out of compliance again. Now I have enforcement in 33 days and don't know what to do anymore.
If someone has ideas or have stumbled upon the same problem - I'm all ears.

Thanks in advance,
Gert J.

[Wayne DeNardi]

I would suggest that you log a call with the Cisco TAC, especially if you are concerned about the enforcement of the licences.

Without more detail on your infrastructure and its configuration it's very difficult to suggest anything more specific other than looking at call logs to see where the calls are coming from - perhaps there are toll fraud attempts coming in from outside?

[MLGertJ]

Hi!

Thank you for these ideas.
I made a TAC case and didn't get a solution for this.
Fortunately there is no enforcement anymore because those peaks don't appear so often anymore. Last peak was on 17th of January at 6:40 UTC+2 (Out of working hours).
I did see, that 6:41 someone joined into meeting from Lync call but that was a minut after the peak started already.
Other than that there is no call activity according to cluster logs. (We are collecting logs from every CMS callbridge).
I am starting to think that is has something to do with Lync calls coming into CMS cluster.