[cisco-voip] Audit trail on CM or UC

Thu Sep 13 14:18:26 EDT 2012

Lelio,

You're correct about the specific feature reading the CUCM Audit Log only
showing "who made the change"...

The software has another helpful feature alongside that's called
Snapshot-Compare which captures configuration data at a point in time and
allows you to compare that "Snapshot" to your current running config (or
any other snapshot).  The result is a Word document that shows any Added
Deleted Changed data fields of CUCM.  So now you can see what's been done
to your Route Patterns, Hunt Groups, Device Pools, etc...(and even Speed
Dials on IP Phones).

Screenshots attached.

Regards,

Chris

On Thu, Sep 13, 2012 at 12:25 PM, Lelio Fulgenzi <lelio at uoguelph.ca> wrote:

> that's definitely helpful in reading the audit logs, but still not FROM/TO
> data logging.
>
> ---
> Lelio Fulgenzi, B.A.
> Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1
> (519) 824-4120 x56354 (519) 767-1060 FAX (ANNU)
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> Cooking with unix is easy. You just sed it and forget it.
>                               - LFJ (with apologies to Mr. Popeil)
>
>
> ------------------------------
> *From: *"Chris Lee" <chris at variphy.com>
> *To: *"Lelio Fulgenzi" <lelio at uoguelph.ca>, "Erick Amaya" <
> eamaya at gmail.com>, "Scott Voll" <svoll.voip at gmail.com>
> *Cc: *cisco-voip at puck.nether.net
> *Sent: *Thursday, September 13, 2012 1:09:35 PM
> *Subject: *Re: [cisco-voip] Audit trail on CM or UC
>
>
> Hi There,
>
> Erick is correct, Variphy parse the CUCM Audit log to make it human
> readable.  You can either upload the audit log manually to my software
> after grabbing it from RTMT or setup in RTMT to FTP the audit log files.
> Point Variphy to the location of the FTP server directory and we'll read
> them in automatically.  After the audit log is read in, you filter out the
> "data noise" to see "who made that change".
>
> Attached is a screenshot of our output of the feature in action.
>
> Regards,
>
> Chris
>
>
>
> On Thu, Sep 13, 2012 at 11:35 AM, Erick Amaya <eamaya at gmail.com> wrote:
>
>> There is third party application call Variphy that will keep track of
>> changes in the cluster database, based on username logging. You might want
>> to check it out there is also a host of other features you might be able to
>> utilize like phone remote control and creating macro scrips to press
>> selected keys on the hand set.
>>
>>
>> On Sep 13, 2012, at 11:21 AM, Lelio Fulgenzi <lelio at uoguelph.ca> wrote:
>>
>> as far as I know, the only audit trail there is is a web page access
>> audit trail which tells you what page someone went to. it doesn't give you
>> a from/to audit, i.e. this data was changed from this to that.
>>
>> there are front end management tools that give you that apparently, but
>> then all your changes would have to go through that front end tool.
>>
>> an audit trail would be very helpful in troubleshooting. but alas, it's
>> not there. :(
>>
>> ---
>> Lelio Fulgenzi, B.A.
>> Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1
>> (519) 824-4120 x56354 (519) 767-1060 FAX (ANNU)
>> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>> Cooking with unix is easy. You just sed it and forget it.
>>                               - LFJ (with apologies to Mr. Popeil)
>>
>>
>> ------------------------------
>> *From: *"Scott Voll" <svoll.voip at gmail.com>
>> *To: *cisco-voip at puck.nether.net
>> *Sent: *Thursday, September 13, 2012 12:12:14 PM
>> *Subject: *[cisco-voip] Audit trail on CM or UC
>>
>> What is our ability to audit who made changes to CM or UC?  we are
>> looking at giving our Helpdesk basic access, but we would like to know how
>> we can see who made what changes.
>>
>> TIA
>>
>> Scott
>> version 7.1 soon to be 8.6
>>
>> _______________________________________________
>> cisco-voip mailing list
>> cisco-voip at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>> _______________________________________________
>> cisco-voip mailing list
>> cisco-voip at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>>
>> _______________________________________________
>> cisco-voip mailing list
>> cisco-voip at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20120913/3e69e196/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Compare - Change Report Summary.png
Type: image/png
Size: 32030 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20120913/3e69e196/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Compare - Phones Added, Deleted, Changed.png
Type: image/png
Size: 38770 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20120913/3e69e196/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Compare - Comparison Start.png
Type: image/png
Size: 15002 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20120913/3e69e196/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Compare - Phone Template Buttons Changed.png
Type: image/png
Size: 39104 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20120913/3e69e196/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Compare - Comparison Speed Dial Changed.png
Type: image/png
Size: 10767 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20120913/3e69e196/attachment-0004.png>