There might be an app for that:<div><br></div><div><a href="http://splunk-base.splunk.com/apps/25504/splunk-for-cisco-cdr">http://splunk-base.splunk.com/apps/25504/splunk-for-cisco-cdr</a> </div><div><br></div><div><br><br>
<div class="gmail_quote">On Wed, May 30, 2012 at 10:10 AM, Wes Sisk <span dir="ltr"><<a href="mailto:wsisk@cisco.com" target="_blank">wsisk@cisco.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">I've heard and seen positive things from splunk. Is there a wiki or mailing list that discusses using splunk to monitor cisco UC environments?<span class="HOEnZb"><font color="#888888"><div>
<br></div><div>/wes</div></font></span><div><div class="h5"><div><br><div><div>On May 30, 2012, at 7:59 AM, Ed Leatherman wrote:</div><br>Re: splunk, I have real-time alerts setup that do similar jobs (monitor particular devices for unregistration etc). It is free also up a certain amount of data per day. I also use it for searching and reporting on CDRs<br>
<br><div class="gmail_quote">On Tue, May 29, 2012 at 3:07 PM, Lelio Fulgenzi <span dir="ltr"><<a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div style="font-size:10pt;font-family:Verdana"><br>we use syslog for this.<br><br>you can dump your callmanager syslog setting to a syslog server, then, in conjunction with something like SEC (simple event correlator) you can set up alarms and stuff. it's quite powerful. and free.<br>
<br>Splunk is also supposed to have some neat filtering tools as well. I heard they recently added realtime alerts vs timed alerts, so they might be a better option depending on cost.<br><br>ok, so not RTMT, but i think it will do what you're asking.<br>
<br>lelio<br><br><span><br><span name="x"></span>---<br>Lelio Fulgenzi, B.A.<br>Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1<br>(519) 824-4120 x56354 (519) 767-1060 FAX (ANNU)<br>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>
Cooking with unix is easy. You just sed it and forget it. <br> - LFJ (with apologies to Mr. Popeil)<br><span name="x"></span><br></span><br><hr><b>From: </b>"Tim Reimers" <<a href="mailto:treimers@ashevillenc.gov" target="_blank">treimers@ashevillenc.gov</a>><br>
<b>To: </b><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br><b>Sent: </b>Tuesday, May 29, 2012 2:51:01 PM<br><b>Subject: </b>[cisco-voip] Monitor registration/re-registration on a selected device in RTMT???<div>
<div><br><br><div><p class="MsoNormal">Hi all –</p><div> <br></div><p class="MsoNormal">Is it possible to monitor a selected device (an ATA in this case)</p><p class="MsoNormal">in RTMT?</p><div>
<br></div><p class="MsoNormal">I’ve figured out how to monitor a given line, but this line shows on several devices, and I’m only interested in the one ATA where one of the appearances is..</p><div> <br></div><p class="MsoNormal">
I need to see if a particular device is registering and re-registering - </p><div> <br></div><p class="MsoNormal">Or any other evidence that would exist to show that this device has been falling off and climbing back onto the network….</p>
<div> <br></div><div> <br></div><p class="MsoNormal">Thanks, Tim</p></div><br></div></div>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br></div></div><br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Ed Leatherman<br><br>
_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</div><br></div></div></div></div><br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br></div>