[cisco-voip] what are the cool kids using to read CUCM logs nowadays?

Thu May 17 14:58:35 EDT 2018

I think the Find in Files feature of Notepad++ is adequate.  What are you
seeing as a shortcoming?

On Thu, May 17, 2018 at 1:44 PM Brian Meade <bmeade90 at vt.edu> wrote:

> Nice find!  I used to use Windows Grep for this but the project died off.
> I hate the Find in Files in Notepad++ compared to a standalone tool.
>
> On Thu, May 17, 2018 at 2:04 PM, ROZA, Ariel <Ariel.ROZA at la.logicalis.com>
> wrote:
>
>> I also found VERY useful to use grepWin (
>> https://tools.stefankueng.com/grepWin.html) when tring to find something
>> in multiple files. It´s several times faster than Notepad++´s multifile
>> search.
>>
>>
>>
>> *De:* cisco-voip [mailto:cisco-voip-bounces at puck.nether.net] *En nombre
>> de *Lelio Fulgenzi
>> *Enviado el:* jueves, 17 de mayo de 2018 01:20 p.m.
>> *Para:* Florian Kroessbacher <florian.kroessbacher at gmail.com>; Anthony
>> Holloway <avholloway+cisco-voip at gmail.com>; Ryan Huff <
>> ryanhuff at outlook.com>
>> *CC:* voyp list, cisco-voip (cisco-voip at puck.nether.net) <
>> cisco-voip at puck.nether.net>
>> *Asunto:* Re: [cisco-voip] what are the cool kids using to read CUCM
>> logs nowadays?
>>
>>
>>
>> Ah. Interesting. Thanks Florian!
>>
>>
>>
>> ---
>>
>> *Lelio Fulgenzi, B.A.* | Senior Analyst
>>
>> Computing and Communications Services | University of Guelph
>>
>> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
>> N1G 2W1
>>
>> 519-824-4120 Ext. 56354 <(519)%20824-4120> | lelio at uoguelph.ca
>>
>>
>>
>> www.uoguelph.ca/ccs
>> <https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.uoguelph.ca%2Fccs&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218028962&sdata=nll4K4lwYrnZoYjzo4xwhCrAY6CV7llsYZ%2B2J5FlYkM%3D&reserved=0>
>> | @UofGCCS on Instagram, Twitter and Facebook
>>
>>
>>
>> [image: University of Guelph Cornerstone with Improve Life tagline]
>>
>>
>>
>> *From:* Florian Kroessbacher <florian.kroessbacher at gmail.com>
>> *Sent:* Thursday, May 17, 2018 12:15 PM
>> *To:* Anthony Holloway <avholloway+cisco-voip at gmail.com>; Ryan Huff <
>> ryanhuff at outlook.com>; Lelio Fulgenzi <lelio at uoguelph.ca>
>> *Cc:* voyp list, cisco-voip (cisco-voip at puck.nether.net) <
>> cisco-voip at puck.nether.net>
>> *Subject:* Re: [cisco-voip] what are the cool kids using to read CUCM
>> logs nowadays?
>>
>>
>>
>> Maybe this is something
>>
>> https://cway.cisco.com/tools/CollaborationSolutionsAnalyzer/
>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcway.cisco.com%2Ftools%2FCollaborationSolutionsAnalyzer%2F&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218038966&sdata=u%2Fr%2B2NDWYzh5116Yozq5ejyMLU1Stl3AP0oTe3jyw74%3D&reserved=0>
>>
>>
>>
>> *--*
>>
>> *Florian Krößbacher*
>>
>> florian.kroessbacher at gmail.com
>>
>>
>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FflohATinnsbruck&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218038966&sdata=RKPd8FONXYTMUnl7lKthPWzAuvwk45w8HC0Zq7YRJqk%3D&reserved=0>
>>
>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplus.google.com%2F%2BFlorianKroessbacher&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218048970&sdata=b2YR3dzsdylcXn2ymtPmYWHMXWcc0mTVhPbNiYVK2hQ%3D&reserved=0>
>>
>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fin%2Fflorian-kroessbacher-5a29a832%3F&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218058983&sdata=x1iwMFvirYw1ZF1v2aolQKcY%2FHPqeXDBanO0XMUZImw%3D&reserved=0>
>>
>>
>> Am 17. Mai 2018, 18:12 +0200 schrieb Lelio Fulgenzi <lelio at uoguelph.ca>:
>>
>> Awesome info! Thanks.
>>
>>
>>
>> My hope is to just get an idea of what’s going on. But I agree, I usually
>> tend to go to the TAC for more detailed help.
>>
>>
>>
>>
>>
>> ---
>>
>> *Lelio Fulgenzi, B.A.* | Senior Analyst
>>
>> Computing and Communications Services | University of Guelph
>>
>> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
>> N1G 2W1
>>
>> 519-824-4120 Ext. 56354 <519-824-4120;56354> | lelio at uoguelph.ca
>>
>>
>>
>> www.uoguelph.ca/ccs
>> <https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.uoguelph.ca%2Fccs&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218058983&sdata=Na0wGlLEB7EUUCGcXE9X%2B8FL0n9WwhfWLCfQ3n%2FE3I8%3D&reserved=0> |
>> @UofGCCS on Instagram, Twitter and Facebook
>>
>>
>>
>> [image: University of Guelph Cornerstone with Improve Life tagline]
>>
>>
>>
>> *From:* Anthony Holloway <avholloway+cisco-voip at gmail.com>
>> *Sent:* Thursday, May 17, 2018 10:56 AM
>> *To:* Ryan Huff <ryanhuff at outlook.com>
>> *Cc:* Lelio Fulgenzi <lelio at uoguelph.ca>; voyp list, cisco-voip (
>> cisco-voip at puck.nether.net) <cisco-voip at puck.nether.net>
>> *Subject:* Re: [cisco-voip] what are the cool kids using to read CUCM
>> logs nowadays?
>>
>>
>>
>> I also second TranslatorX as my first stop.  Make sure to have CDR
>> enabled on the cluster, and just dump all of the compressed logs into it,
>> pop open the Call List, find your call, double click it to see some good
>> high level details (disconnect cause, duration, codecs, dtmf, ip addresses,
>> device names) about the call, then generate a filter if you need to see the
>> ladder diagram.  I don't use it for more complex log analysis, for that I
>> sail over to Ryan's island and ask to use his Windows ME box and fire up
>> Notepad++.
>>
>>
>>
>> The find in files feature is amazing, but you will need to un-compress
>> the logs first (RTMT can do this for you). The highlighting is helpful, and
>> if you know regex, you're golden.  PS Some folks in TAC have syntax
>> highlighting for CM traces in Notepad++, but so far they have not been
>> willing to share it with me.
>>
>>
>>
>> Which brings me to my final point.  Reading CM traces is not an easy
>> effort, and you should give yourself a time limit, then just open a TAC
>> case (or send it to Daniel Pagan; the human parser).  The Troubleshooting
>> IP Telephony book is pretty good, and there's a few nuggets on the mailing
>> list, but really, if you're not working in TAC, or a TAC like job function,
>> you're swimming up stream.  You might have better luck performing
>> controlled experiments, swapping components in and out to isolate the root
>> cause.
>>
>>
>>
>> With that said, you'll never get better at log parsing, if you're not log
>> parsing.  So, if you're sick and twisted like Ryan and Daniel able to
>> devote some time to log parsing, go for it.
>>
>>
>>
>> On Thu, May 17, 2018 at 8:33 AM Ryan Huff <ryanhuff at outlook.com> wrote:
>>
>> For the money (free) and usability; yeah, I’d go with Paul’s TranslatorX.
>> Especially if your troubleshooting call behaviors because of its ability to
>> organize by session ID and parse out OPTIONS messages.
>>
>>
>>
>> - Geany text editor does a good job because of its ability to highlight
>> similar entities (Linux, not sure if there is a Windows port).
>>
>>
>>
>> - Notepad++ if I’m on an island and that’s all I have.
>>
>>
>>
>> Really though, anything that can parse the
>> character will work in a pinch but you’ll have to deal with the default
>> chronologically logged readout. Whereas something like TranslatorX has more
>> purposeful filters that allow you to follow the call’s message stack a
>> little easier.
>>
>>
>>
>> -Ryan-
>>
>>
>> On May 17, 2018, at 09:17, Lelio Fulgenzi <lelio at uoguelph.ca> wrote:
>>
>>
>>
>> I need to do some log analysis to see why a certain group of fax machines
>> are getting reorder tone when trying to dial a number. I’ve got some other
>> troubleshooting steps to do first, but I have a feeling I’m going to have
>> to take a look.
>>
>>
>>
>> Is it translator X still?
>>
>>
>>
>> ---
>>
>> *Lelio Fulgenzi, B.A.* | Senior Analyst
>>
>> Computing and Communications Services | University of Guelph
>>
>> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
>> N1G 2W1
>>
>> 519-824-4120 Ext. 56354 <(519)%20824-4120> | lelio at uoguelph.ca
>>
>>
>>
>> www.uoguelph.ca/ccs
>> <https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.uoguelph.ca%2Fccs&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218068996&sdata=MlI4DiyK3lRfeAQKndga5k6rgOtdVpZJizX0LyTi0pQ%3D&reserved=0> |
>> @UofGCCS on Instagram, Twitter and Facebook
>>
>>
>>
>> <image001.png>
>>
>>
>>
>> _______________________________________________
>> cisco-voip mailing list
>> cisco-voip at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218068996&sdata=%2FJQsE9nTlmbQhWVTfMT5%2B2unn%2B8tvjl0iVuuXQ3g%2Fxw%3D&reserved=0>
>>
>> _______________________________________________
>> cisco-voip mailing list
>> cisco-voip at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218079021&sdata=dptEZxaFqA%2F%2F7DxGljVYCZvzYZq13HZXorjdksOa%2FPU%3D&reserved=0>
>>
>> _______________________________________________
>> cisco-voip mailing list
>> cisco-voip at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218079021&sdata=dptEZxaFqA%2F%2F7DxGljVYCZvzYZq13HZXorjdksOa%2FPU%3D&reserved=0>
>>
>>
>> _______________________________________________
>> cisco-voip mailing list
>> cisco-voip at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20180517/89f2a057/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 1297 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20180517/89f2a057/attachment.png>