[cisco-voip] [cisco-VoIP] Log file query

[Wes Sisk (wsisk)]

Add in the localhost access logs ( CSCsj01819    need http auditing equivalent to windows train ) and you get a pretty clear picture of who changed what and when.

Agreed it is not perfect. It is better than the "nothing" described earlier in this thread.

Push for AAA/TACACS integration in UCM didn't get much support from the user community.  Move toward Unified Provisioning may provide additional audit capabilities.

-Wes

On Feb 5, 2014, at 9:29 PM, Lelio Fulgenzi <lelio at uoguelph.ca<mailto:lelio at uoguelph.ca>> wrote:

A (true) audit log would not only have who made what change and from where, but what they changed - from what, to what. In the event of a deletion, a dump of what they deleted.

Ideally, you can use these audit logs (or are they transaction log?) to retrace the steps of an accidental deletion.

Especially with no real way to compare the current system with the most recent backup (or is there?) and restore what's missing, an audit log like this would be very helpful.

I've been meaning to look at what's available with the current reporting structure to do daily comparisons to see what's changed.

We had a very important PLAR go missing and noone knew who did it.

Just my two cents.

Sent from my iPhone

On 2014-02-05, at 7:11 PM, "Wes Sisk (wsisk)" <wsisk at cisco.com<mailto:wsisk at cisco.com>> wrote:

Have you checked this?

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/service/7_1_2/admin/saaulog.html

What is the delta between this and what you really need?

-Wes

On Feb 5, 2014, at 2:44 PM, Jason Aarons (AM) <jason.aarons at dimensiondata.com<mailto:jason.aarons at dimensiondata.com>> wrote:

Your Cisco Account Manager would need to submit a PERS request (Product Enhancement Request).

Since Uplinx and other third parties sell such tools I would suspect Cisco won’t invest the capital needed to add this feature.  But that is my opinion.

From: cisco-voip [mailto:cisco-voip-bounces at puck.nether.net<mailto:voip-bounces at puck.nether.net>] On Behalf Of Thomas LeMay
Sent: Wednesday, February 05, 2014 11:31 AM
To: 'Brian Meade (brmeade)'; 'James Dust'; cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
Subject: Re: [cisco-voip] [cisco-VoIP] Log file query


Hi, Brian,

Will there ever be audit logs that specifically show exactly what was changed and by who?  If not, can this become a road map request?

Thank you,

Tom

From: cisco-voip [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Brian Meade (brmeade)
Sent: Wednesday, February 05, 2014 8:22 AM
To: James Dust; cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
Subject: Re: [cisco-voip] Log file query

James,

The audit logs are going to be your best bet.  They don’t give a ton of info on what specifically was changed though.

Brian

From: cisco-voip [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of James Dust
Sent: Wednesday, February 05, 2014 6:59 AM
To: cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
Subject: [cisco-voip] Log file query

Morning all,

I was just wondering if there is a log file I can export from CUCM to show what changes have been made in the past month?

For instance, to show what DN’s, phones and other changes have been made since a certain date.

Regards

James


Consider the environment - Think before you print

The contents of this email are confidential to the intended recipient and may not be disclosed. Although it is believed that this email and any attachments are virus free, it is the responsibility of the recipient to confirm this.

You are advised that urgent, time-sensitive communications should not be sent by email. We hereby give you notice that a delivery receipt does not constitute acknowledgement or receipt by the intended recipient(s).

Details of Charles Stanley group companies and their regulators (where applicable), can be found at this URL http://www.charles-stanley.co.uk/contact-us/disclosure/


itevomcid
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20140206/24e5c3e8/attachment.html>