cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
654
Views
0
Helpful
0
Replies

Cisco Unity Connection Audit Logs - Unknown UserID and ClientAddress

kevin.dulli
Level 1
Level 1

I was reviewing logs on our Unity servers last week and saw some strange entries that I haven't been able to find good explanations for. They are similar to the one below. I've omitted everything after 'DtmfAccessId=' since there was user information throughout.

 

19:07:11.637 |LogMessage   UserID : unknown  ClientAddress : unknown  Severity : 1  EventType : GeneralConfigurationUpdate  ResourceAccessed: unknown  EventStatus : Success  CompulsoryEvent : No  AuditCategory : AdministrativeEvent  ComponentID : Cisco Unity Connection  AuditDetails : Created Extension with DtmfAccessId=

 

I'm not sure what is indicated by the unknown values here. Is this the system making changes to that extension? I'm expecting an administrator credential or at least a valid address. Let me know if anyone has any insight as to why these events have this information absent.

0 Replies 0