06-21-2016 10:27 PM - edited 03-19-2019 11:16 AM
HI,
i would like to ask for help on how to read the audit logs that i gathered from CUCM and UCCX. i want to determine who's user change the configuration on our system, but i can't seem to understand how to read this logs.
Please kindly see attached file.
Thank you very much
Solved! Go to Solution.
06-21-2016 11:22 PM
Open these files in notepad++, you will find required details. As I see a user 'terryv' has removed some end users from cucm at 18:55 and his/her desktop IP address is 10.18.1.61
Suresh
06-21-2016 11:22 PM
Open these files in notepad++, you will find required details. As I see a user 'terryv' has removed some end users from cucm at 18:55 and his/her desktop IP address is 10.18.1.61
Suresh
06-22-2016 03:02 AM
06-22-2016 03:43 AM
Hello, yes it is same. I see user 'uccxadmin' accessed Service_Center_12052015_NBH script at 18:47.
Suresh
06-22-2016 04:52 AM
Hi,
Thank you very much for the help. :)
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide