CUCM remote syslog and audit log output

[ray maslanka]

Running CUCM v15 and recently configured remote syslog server under Enterprise Parameters as well as Audit Log server under Serviceability.

Our Splunk / syslog team indicates they are receiving logs from one cluster but not another.

Is there a another service or configuration that needs to be addressed to enable basic syslog output?

[Nithin Eluvathingal]

Ensure the configurations match the working cluster for the nonworking one. How many clusters do you have?

[ray maslanka]

I have 4 clusters where the same remote server was set in the cluster wide Enterprise Parameters, as well as in Audit Log server under Serviceability for all servers in each.  Three clusters were set at the same time after testing successfully with our fourth certification environment cluster.  

Are you aware of another service or configuration that needs to be addressed to enable basic syslog output?