cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1257
Views
33
Helpful
5
Replies

CUCM detailed Logs

We want to get a detailed log of the CUCM 8.6

we need to know who login to CUCM and what he did ( any activity - any field or configuration change in deatil )

Any recommendation /

Regards

Mohamed

5 Replies 5

Jagpreet Barmi
Cisco Employee
Cisco Employee

Hi Mohamed,

You can collect the Audit Logs from the call manager using RTMT to get the information.

HTH,

Jagpreet Singh Barmi

Hi Jagpreet,

Thanks for your reply

The Audit logs doesn't give me detailed information such which dfield id this user change in CUCM configuration ?

Regards

Mohamed

Hi Mohamed

Jagpreet is correct (+ 5 Stars)

You can achieve this with AUDIT LOGGING in CUCM

With audit logging, configuration changes to the Cisco Unified Communications Manager system gets logged in separate log files for auditing. The Cisco Audit Event Service, which displays under Control Center—Network Services in Cisco Unified Serviceability, monitors and logs any configuration change to the Cisco Unified Communications Manager system by a user or as a result of the user action. For a Cisco Unified Communications Manager Business Edition system, this service supports both Cisco Unified Communications Manager and Cisco Unity Connection.

You access the Audit Log Configuration window in Cisco Unified Serviceability to configure the settings for the audit logs.

- Audit logging contains the following parts:

Audit logging framework—The framework comprises an API that uses an alarm library to write audit events into audit logs. An alarm catalog that is defined as GenericAlarmCatalog.xml applies for these alarms. Different Cisco Unified Communications Manager components provide their own logging.

The following example displays an API that a Cisco Unified Communications Manager component can use to send an alarm:

User ID: CCMAdministrator

Client IP Address: 172.19.240.207

Severity: 3

EventType: ServiceStatusUpdated

ResourceAccessed: CCMService

EventStatus: Successful

Description: CallManager Service status is stopped

Audit event logging—An audit event represents any event that is required to be logged. The following example displays a sample audit event:

CCM_TOMCAT-GENERIC-3-AuditEventGenerated: Audit Event Generated

UserID:CCMAdministrator Client IP Address:172.19.240.207 Severity:3

EventType:ServiceStatusUpdated ResourceAccessed: CCMService EventStatus:

Successful Description: Call Manager Service status is stopped App ID:Cisco Tomcat

Cluster ID:StandAloneCluster Node ID:sa-cm1-3

I hope this help....

Cheers
Bruno Rangel

Please remember to rate helpful  responses using the stars bellow and identify helpful or correct answers .

Cheers
Bruno Rangel
Please remember to rate helpful responses using the star bellow and identify helpful or correct answers

ahmed_maher
Level 1
Level 1

Dears,

I think Mohamed needs detailed like which field get updated in the phone like "Device Pool", "Location", ....

is it possibel?

thanks

Hi

You can check a good post from William (Colaborator here on CSC) to further clarification:

Audit Logs on Cisco Unified Communications Manager (CUCM)

Also you can see the documentation on Cisco Site, to understand how does it works.

Audit Logging


Please remember to rate helpful  responses and identify helpful or correct answers.

Cheers
Bruno Rangel
Please remember to rate helpful responses using the star bellow and identify helpful or correct answers