[cisco-voip] MLA command history?

[Robert Kulagowski]

Wes Sisk wrote:
> The MLA access logs tell you a little bit:
> http://www.cisco.com/en/US/customer/products/sw/voicesw/ps556/products_administration_guide_chapter09186a00803eda81.html#wp1025731 
> 
> 
> 07/31/06:11:23:31:Access:|ccmadministrator|access||/CCMAdmin/_RemoteScripts/rs_system.asp||deleteRoutePattern 
> : called with Full Access
> 07/31/06:11:24:18:Access:|ccmadministrator|access||/CCMAdmin/_RemoteScripts/rs_system.asp||deleteRoutePattern 
> : called with Full Access
> 
> But as Ryan said, this IIS logs tell you more.

It turns out that in this case it wasn't a delete; it was an update that 
should have been a copy.

I haven't had the cycles to investigate, so I'll have to check if there 
would have been sufficient details in the IIS logs to determine what 
happened.