[cisco-voip] what are the cool kids using to read CUCM logs nowadays?

Brian Meade bmeade90 at vt.edu
Thu May 17 14:43:40 EDT 2018


Nice find!  I used to use Windows Grep for this but the project died off.
I hate the Find in Files in Notepad++ compared to a standalone tool.

On Thu, May 17, 2018 at 2:04 PM, ROZA, Ariel <Ariel.ROZA at la.logicalis.com>
wrote:

> I also found VERY useful to use grepWin (https://tools.stefankueng.
> com/grepWin.html) when tring to find something in multiple files. It´s
> several times faster than Notepad++´s multifile search.
>
>
>
> *De:* cisco-voip [mailto:cisco-voip-bounces at puck.nether.net] *En nombre
> de *Lelio Fulgenzi
> *Enviado el:* jueves, 17 de mayo de 2018 01:20 p.m.
> *Para:* Florian Kroessbacher <florian.kroessbacher at gmail.com>; Anthony
> Holloway <avholloway+cisco-voip at gmail.com>; Ryan Huff <
> ryanhuff at outlook.com>
> *CC:* voyp list, cisco-voip (cisco-voip at puck.nether.net) <
> cisco-voip at puck.nether.net>
> *Asunto:* Re: [cisco-voip] what are the cool kids using to read CUCM logs
> nowadays?
>
>
>
> Ah. Interesting. Thanks Florian!
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 | lelio at uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs
> <https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.uoguelph.ca%2Fccs&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218028962&sdata=nll4K4lwYrnZoYjzo4xwhCrAY6CV7llsYZ%2B2J5FlYkM%3D&reserved=0>
> | @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
>
>
> *From:* Florian Kroessbacher <florian.kroessbacher at gmail.com>
> *Sent:* Thursday, May 17, 2018 12:15 PM
> *To:* Anthony Holloway <avholloway+cisco-voip at gmail.com>; Ryan Huff <
> ryanhuff at outlook.com>; Lelio Fulgenzi <lelio at uoguelph.ca>
> *Cc:* voyp list, cisco-voip (cisco-voip at puck.nether.net) <
> cisco-voip at puck.nether.net>
> *Subject:* Re: [cisco-voip] what are the cool kids using to read CUCM
> logs nowadays?
>
>
>
> Maybe this is something
>
> https://cway.cisco.com/tools/CollaborationSolutionsAnalyzer/
> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcway.cisco.com%2Ftools%2FCollaborationSolutionsAnalyzer%2F&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218038966&sdata=u%2Fr%2B2NDWYzh5116Yozq5ejyMLU1Stl3AP0oTe3jyw74%3D&reserved=0>
>
>
>
> *--*
>
> *Florian Krößbacher*
>
> florian.kroessbacher at gmail.com
>
>
> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FflohATinnsbruck&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218038966&sdata=RKPd8FONXYTMUnl7lKthPWzAuvwk45w8HC0Zq7YRJqk%3D&reserved=0>
>
> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplus.google.com%2F%2BFlorianKroessbacher&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218048970&sdata=b2YR3dzsdylcXn2ymtPmYWHMXWcc0mTVhPbNiYVK2hQ%3D&reserved=0>
>
> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fin%2Fflorian-kroessbacher-5a29a832%3F&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218058983&sdata=x1iwMFvirYw1ZF1v2aolQKcY%2FHPqeXDBanO0XMUZImw%3D&reserved=0>
>
>
> Am 17. Mai 2018, 18:12 +0200 schrieb Lelio Fulgenzi <lelio at uoguelph.ca>:
>
> Awesome info! Thanks.
>
>
>
> My hope is to just get an idea of what’s going on. But I agree, I usually
> tend to go to the TAC for more detailed help.
>
>
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 <519-824-4120;56354> | lelio at uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs
> <https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.uoguelph.ca%2Fccs&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218058983&sdata=Na0wGlLEB7EUUCGcXE9X%2B8FL0n9WwhfWLCfQ3n%2FE3I8%3D&reserved=0> |
> @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> [image: University of Guelph Cornerstone with Improve Life tagline]
>
>
>
> *From:* Anthony Holloway <avholloway+cisco-voip at gmail.com>
> *Sent:* Thursday, May 17, 2018 10:56 AM
> *To:* Ryan Huff <ryanhuff at outlook.com>
> *Cc:* Lelio Fulgenzi <lelio at uoguelph.ca>; voyp list, cisco-voip (
> cisco-voip at puck.nether.net) <cisco-voip at puck.nether.net>
> *Subject:* Re: [cisco-voip] what are the cool kids using to read CUCM
> logs nowadays?
>
>
>
> I also second TranslatorX as my first stop.  Make sure to have CDR enabled
> on the cluster, and just dump all of the compressed logs into it, pop open
> the Call List, find your call, double click it to see some good high level
> details (disconnect cause, duration, codecs, dtmf, ip addresses, device
> names) about the call, then generate a filter if you need to see the ladder
> diagram.  I don't use it for more complex log analysis, for that I sail
> over to Ryan's island and ask to use his Windows ME box and fire up
> Notepad++.
>
>
>
> The find in files feature is amazing, but you will need to un-compress the
> logs first (RTMT can do this for you). The highlighting is helpful, and if
> you know regex, you're golden.  PS Some folks in TAC have syntax
> highlighting for CM traces in Notepad++, but so far they have not been
> willing to share it with me.
>
>
>
> Which brings me to my final point.  Reading CM traces is not an easy
> effort, and you should give yourself a time limit, then just open a TAC
> case (or send it to Daniel Pagan; the human parser).  The Troubleshooting
> IP Telephony book is pretty good, and there's a few nuggets on the mailing
> list, but really, if you're not working in TAC, or a TAC like job function,
> you're swimming up stream.  You might have better luck performing
> controlled experiments, swapping components in and out to isolate the root
> cause.
>
>
>
> With that said, you'll never get better at log parsing, if you're not log
> parsing.  So, if you're sick and twisted like Ryan and Daniel able to
> devote some time to log parsing, go for it.
>
>
>
> On Thu, May 17, 2018 at 8:33 AM Ryan Huff <ryanhuff at outlook.com> wrote:
>
> For the money (free) and usability; yeah, I’d go with Paul’s TranslatorX.
> Especially if your troubleshooting call behaviors because of its ability to
> organize by session ID and parse out OPTIONS messages.
>
>
>
> - Geany text editor does a good job because of its ability to highlight
> similar entities (Linux, not sure if there is a Windows port).
>
>
>
> - Notepad++ if I’m on an island and that’s all I have.
>
>
>
> Really though, anything that can parse the
> character will work in a pinch but you’ll have to deal with the default
> chronologically logged readout. Whereas something like TranslatorX has more
> purposeful filters that allow you to follow the call’s message stack a
> little easier.
>
>
>
> -Ryan-
>
>
> On May 17, 2018, at 09:17, Lelio Fulgenzi <lelio at uoguelph.ca> wrote:
>
>
>
> I need to do some log analysis to see why a certain group of fax machines
> are getting reorder tone when trying to dial a number. I’ve got some other
> troubleshooting steps to do first, but I have a feeling I’m going to have
> to take a look.
>
>
>
> Is it translator X still?
>
>
>
> ---
>
> *Lelio Fulgenzi, B.A.* | Senior Analyst
>
> Computing and Communications Services | University of Guelph
>
> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
> N1G 2W1
>
> 519-824-4120 Ext. 56354 <(519)%20824-4120> | lelio at uoguelph.ca
>
>
>
> www.uoguelph.ca/ccs
> <https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.uoguelph.ca%2Fccs&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218068996&sdata=MlI4DiyK3lRfeAQKndga5k6rgOtdVpZJizX0LyTi0pQ%3D&reserved=0> |
> @UofGCCS on Instagram, Twitter and Facebook
>
>
>
> <image001.png>
>
>
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218068996&sdata=%2FJQsE9nTlmbQhWVTfMT5%2B2unn%2B8tvjl0iVuuXQ3g%2Fxw%3D&reserved=0>
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218079021&sdata=dptEZxaFqA%2F%2F7DxGljVYCZvzYZq13HZXorjdksOa%2FPU%3D&reserved=0>
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218079021&sdata=dptEZxaFqA%2F%2F7DxGljVYCZvzYZq13HZXorjdksOa%2FPU%3D&reserved=0>
>
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20180517/8ab8af1e/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 1297 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20180517/8ab8af1e/attachment.png>


More information about the cisco-voip mailing list