[cisco-voip] what are the cool kids using to read CUCM logs nowadays?

[Brian Meade]

It's definitely much slower but the main reason is my preferred workflow.
I use the Search window to easily find things I marked up.  It's hard to do
that when I've got all the file searches in there too.

Also it's really difficult to scroll through that window when I've got
matches in hundreds/thousands of files.  I could find the right file way
faster in Windows Grep.

On Thu, May 17, 2018 at 2:58 PM, Anthony Holloway <
avholloway+cisco-voip at gmail.com> wrote:

> I think the Find in Files feature of Notepad++ is adequate.  What are you
> seeing as a shortcoming?
>
> On Thu, May 17, 2018 at 1:44 PM Brian Meade <bmeade90 at vt.edu> wrote:
>
>> Nice find!  I used to use Windows Grep for this but the project died
>> off.  I hate the Find in Files in Notepad++ compared to a standalone tool.
>>
>> On Thu, May 17, 2018 at 2:04 PM, ROZA, Ariel <Ariel.ROZA at la.logicalis.com
>> > wrote:
>>
>>> I also found VERY useful to use grepWin (https://tools.stefankueng.
>>> com/grepWin.html) when tring to find something in multiple files. It´s
>>> several times faster than Notepad++´s multifile search.
>>>
>>>
>>>
>>> *De:* cisco-voip [mailto:cisco-voip-bounces at puck.nether.net] *En nombre
>>> de *Lelio Fulgenzi
>>> *Enviado el:* jueves, 17 de mayo de 2018 01:20 p.m.
>>> *Para:* Florian Kroessbacher <florian.kroessbacher at gmail.com>; Anthony
>>> Holloway <avholloway+cisco-voip at gmail.com>; Ryan Huff <
>>> ryanhuff at outlook.com>
>>> *CC:* voyp list, cisco-voip (cisco-voip at puck.nether.net) <
>>> cisco-voip at puck.nether.net>
>>> *Asunto:* Re: [cisco-voip] what are the cool kids using to read CUCM
>>> logs nowadays?
>>>
>>>
>>>
>>> Ah. Interesting. Thanks Florian!
>>>
>>>
>>>
>>> ---
>>>
>>> *Lelio Fulgenzi, B.A.* | Senior Analyst
>>>
>>> Computing and Communications Services | University of Guelph
>>>
>>> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
>>> N1G 2W1
>>>
>>> 519-824-4120 Ext. 56354 <(519)%20824-4120> | lelio at uoguelph.ca
>>>
>>>
>>>
>>> www.uoguelph.ca/ccs
>>> <https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.uoguelph.ca%2Fccs&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218028962&sdata=nll4K4lwYrnZoYjzo4xwhCrAY6CV7llsYZ%2B2J5FlYkM%3D&reserved=0>
>>> | @UofGCCS on Instagram, Twitter and Facebook
>>>
>>>
>>>
>>> [image: University of Guelph Cornerstone with Improve Life tagline]
>>>
>>>
>>>
>>> *From:* Florian Kroessbacher <florian.kroessbacher at gmail.com>
>>> *Sent:* Thursday, May 17, 2018 12:15 PM
>>> *To:* Anthony Holloway <avholloway+cisco-voip at gmail.com>; Ryan Huff <
>>> ryanhuff at outlook.com>; Lelio Fulgenzi <lelio at uoguelph.ca>
>>> *Cc:* voyp list, cisco-voip (cisco-voip at puck.nether.net) <
>>> cisco-voip at puck.nether.net>
>>> *Subject:* Re: [cisco-voip] what are the cool kids using to read CUCM
>>> logs nowadays?
>>>
>>>
>>>
>>> Maybe this is something
>>>
>>> https://cway.cisco.com/tools/CollaborationSolutionsAnalyzer/
>>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcway.cisco.com%2Ftools%2FCollaborationSolutionsAnalyzer%2F&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218038966&sdata=u%2Fr%2B2NDWYzh5116Yozq5ejyMLU1Stl3AP0oTe3jyw74%3D&reserved=0>
>>>
>>>
>>>
>>> *--*
>>>
>>> *Florian Krößbacher*
>>>
>>> florian.kroessbacher at gmail.com
>>>
>>>
>>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FflohATinnsbruck&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218038966&sdata=RKPd8FONXYTMUnl7lKthPWzAuvwk45w8HC0Zq7YRJqk%3D&reserved=0>
>>>
>>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fplus.google.com%2F%2BFlorianKroessbacher&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218048970&sdata=b2YR3dzsdylcXn2ymtPmYWHMXWcc0mTVhPbNiYVK2hQ%3D&reserved=0>
>>>
>>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fin%2Fflorian-kroessbacher-5a29a832%3F&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218058983&sdata=x1iwMFvirYw1ZF1v2aolQKcY%2FHPqeXDBanO0XMUZImw%3D&reserved=0>
>>>
>>>
>>> Am 17. Mai 2018, 18:12 +0200 schrieb Lelio Fulgenzi <lelio at uoguelph.ca>:
>>>
>>> Awesome info! Thanks.
>>>
>>>
>>>
>>> My hope is to just get an idea of what’s going on. But I agree, I
>>> usually tend to go to the TAC for more detailed help.
>>>
>>>
>>>
>>>
>>>
>>> ---
>>>
>>> *Lelio Fulgenzi, B.A.* | Senior Analyst
>>>
>>> Computing and Communications Services | University of Guelph
>>>
>>> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
>>> N1G 2W1
>>>
>>> 519-824-4120 Ext. 56354 <519-824-4120;56354> | lelio at uoguelph.ca
>>>
>>>
>>>
>>> www.uoguelph.ca/ccs
>>> <https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.uoguelph.ca%2Fccs&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218058983&sdata=Na0wGlLEB7EUUCGcXE9X%2B8FL0n9WwhfWLCfQ3n%2FE3I8%3D&reserved=0> |
>>> @UofGCCS on Instagram, Twitter and Facebook
>>>
>>>
>>>
>>> [image: University of Guelph Cornerstone with Improve Life tagline]
>>>
>>>
>>>
>>> *From:* Anthony Holloway <avholloway+cisco-voip at gmail.com>
>>> *Sent:* Thursday, May 17, 2018 10:56 AM
>>> *To:* Ryan Huff <ryanhuff at outlook.com>
>>> *Cc:* Lelio Fulgenzi <lelio at uoguelph.ca>; voyp list, cisco-voip (
>>> cisco-voip at puck.nether.net) <cisco-voip at puck.nether.net>
>>> *Subject:* Re: [cisco-voip] what are the cool kids using to read CUCM
>>> logs nowadays?
>>>
>>>
>>>
>>> I also second TranslatorX as my first stop.  Make sure to have CDR
>>> enabled on the cluster, and just dump all of the compressed logs into it,
>>> pop open the Call List, find your call, double click it to see some good
>>> high level details (disconnect cause, duration, codecs, dtmf, ip addresses,
>>> device names) about the call, then generate a filter if you need to see the
>>> ladder diagram.  I don't use it for more complex log analysis, for that I
>>> sail over to Ryan's island and ask to use his Windows ME box and fire up
>>> Notepad++.
>>>
>>>
>>>
>>> The find in files feature is amazing, but you will need to un-compress
>>> the logs first (RTMT can do this for you). The highlighting is helpful, and
>>> if you know regex, you're golden.  PS Some folks in TAC have syntax
>>> highlighting for CM traces in Notepad++, but so far they have not been
>>> willing to share it with me.
>>>
>>>
>>>
>>> Which brings me to my final point.  Reading CM traces is not an easy
>>> effort, and you should give yourself a time limit, then just open a TAC
>>> case (or send it to Daniel Pagan; the human parser).  The Troubleshooting
>>> IP Telephony book is pretty good, and there's a few nuggets on the mailing
>>> list, but really, if you're not working in TAC, or a TAC like job function,
>>> you're swimming up stream.  You might have better luck performing
>>> controlled experiments, swapping components in and out to isolate the root
>>> cause.
>>>
>>>
>>>
>>> With that said, you'll never get better at log parsing, if you're not
>>> log parsing.  So, if you're sick and twisted like Ryan and Daniel able
>>> to devote some time to log parsing, go for it.
>>>
>>>
>>>
>>> On Thu, May 17, 2018 at 8:33 AM Ryan Huff <ryanhuff at outlook.com> wrote:
>>>
>>> For the money (free) and usability; yeah, I’d go with Paul’s
>>> TranslatorX. Especially if your troubleshooting call behaviors because of
>>> its ability to organize by session ID and parse out OPTIONS messages.
>>>
>>>
>>>
>>> - Geany text editor does a good job because of its ability to highlight
>>> similar entities (Linux, not sure if there is a Windows port).
>>>
>>>
>>>
>>> - Notepad++ if I’m on an island and that’s all I have.
>>>
>>>
>>>
>>> Really though, anything that can parse the
>>> character will work in a pinch but you’ll have to deal with the default
>>> chronologically logged readout. Whereas something like TranslatorX has more
>>> purposeful filters that allow you to follow the call’s message stack a
>>> little easier.
>>>
>>>
>>>
>>> -Ryan-
>>>
>>>
>>> On May 17, 2018, at 09:17, Lelio Fulgenzi <lelio at uoguelph.ca> wrote:
>>>
>>>
>>>
>>> I need to do some log analysis to see why a certain group of fax
>>> machines are getting reorder tone when trying to dial a number. I’ve got
>>> some other troubleshooting steps to do first, but I have a feeling I’m
>>> going to have to take a look.
>>>
>>>
>>>
>>> Is it translator X still?
>>>
>>>
>>>
>>> ---
>>>
>>> *Lelio Fulgenzi, B.A.* | Senior Analyst
>>>
>>> Computing and Communications Services | University of Guelph
>>>
>>> Room 037 Animal Science & Nutrition Bldg | 50 Stone Rd E | Guelph, ON |
>>> N1G 2W1
>>>
>>> 519-824-4120 Ext. 56354 <(519)%20824-4120> | lelio at uoguelph.ca
>>>
>>>
>>>
>>> www.uoguelph.ca/ccs
>>> <https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.uoguelph.ca%2Fccs&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218068996&sdata=MlI4DiyK3lRfeAQKndga5k6rgOtdVpZJizX0LyTi0pQ%3D&reserved=0> |
>>> @UofGCCS on Instagram, Twitter and Facebook
>>>
>>>
>>>
>>> <image001.png>
>>>
>>>
>>>
>>> _______________________________________________
>>> cisco-voip mailing list
>>> cisco-voip at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218068996&sdata=%2FJQsE9nTlmbQhWVTfMT5%2B2unn%2B8tvjl0iVuuXQ3g%2Fxw%3D&reserved=0>
>>>
>>> _______________________________________________
>>> cisco-voip mailing list
>>> cisco-voip at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218079021&sdata=dptEZxaFqA%2F%2F7DxGljVYCZvzYZq13HZXorjdksOa%2FPU%3D&reserved=0>
>>>
>>> _______________________________________________
>>> cisco-voip mailing list
>>> cisco-voip at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>> <https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7Cariel.roza%40la.logicalis.com%7C52809a0913f549b9dcd608d5bc1213fd%7C2e3290cb8d404058abe502c4f58b87e3%7C0%7C0%7C636621708218079021&sdata=dptEZxaFqA%2F%2F7DxGljVYCZvzYZq13HZXorjdksOa%2FPU%3D&reserved=0>
>>>
>>>
>>> _______________________________________________
>>> cisco-voip mailing list
>>> cisco-voip at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>>
>>>
>> _______________________________________________
>> cisco-voip mailing list
>> cisco-voip at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20180517/4f2c05d8/attachment.html>