I was reviewing logs on our Unity servers last week and saw some strange entries that I haven't been able to find good explanations for. They are similar to the one below. I've omitted everything after 'DtmfAccessId=' since there was user information throughout.
19:07:11.637 |LogMessage UserID : unknown ClientAddress : unknown Severity : 1 EventType : GeneralConfigurationUpdate ResourceAccessed: unknown EventStatus : Success CompulsoryEvent : No AuditCategory : AdministrativeEvent ComponentID : Cisco Unity Connection AuditDetails : Created Extension with DtmfAccessId=
I'm not sure what is indicated by the unknown values here. Is this the system making changes to that extension? I'm expecting an administrator credential or at least a valid address. Let me know if anyone has any insight as to why these events have this information absent.