<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Verdana; font-size: 10pt; color: #000000'>Thanks for the update Chris. <br><br><br><span><br><span name="x"></span>---<br>Lelio Fulgenzi, B.A.<br>Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1<br>(519) 824-4120 x56354 (519) 767-1060 FAX (ANNU)<br>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>Cooking with unix is easy. You just sed it and forget it. <br> - LFJ (with apologies to Mr. Popeil)<br><span name="x"></span><br></span><br><hr id="zwchr"><b>From: </b>"Chris Lee" <chris@variphy.com><br><b>To: </b>"Lelio Fulgenzi" <lelio@uoguelph.ca><br><b>Cc: </b>cisco-voip@puck.nether.net, "Erick Amaya" <eamaya@gmail.com>, "Scott Voll" <svoll.voip@gmail.com><br><b>Sent: </b>Thursday, September 13, 2012 2:18:26 PM<br><b>Subject: </b>Re: [cisco-voip] Audit trail on CM or UC<br><br>Lelio,<br><br>You're correct about the specific feature reading the CUCM Audit Log only showing "who made the change"...<br><br>The software has another helpful feature alongside that's called Snapshot-Compare which captures configuration data at a point in time and allows you to compare that "Snapshot" to your current running config (or any other snapshot). The result is a Word document that shows any Added Deleted Changed data fields of CUCM. So now you can see what's been done to your Route Patterns, Hunt Groups, Device Pools, etc...(and even Speed Dials on IP Phones).<br>
<br>Screenshots attached.<br><br>Regards,<br><br>Chris<br><br><br><br><div class="gmail_quote">On Thu, Sep 13, 2012 at 12:25 PM, Lelio Fulgenzi <span dir="ltr"><<a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-size:10pt;font-family:Verdana">that's definitely helpful in reading the audit logs, but still not FROM/TO data logging. <span><br>
<div class="im"><br><span></span>---<br>Lelio Fulgenzi, B.A.<br>Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1<br>(519) 824-4120 x56354 (519) 767-1060 FAX (ANNU)<br>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>
Cooking with unix is easy. You just sed it and forget it. <br> - LFJ (with apologies to Mr. Popeil)<br><span></span><br></div></span><br><hr><b>From: </b>"Chris Lee" <<a href="mailto:chris@variphy.com" target="_blank">chris@variphy.com</a>><br>
<b>To: </b>"Lelio Fulgenzi" <<a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a>>, "Erick Amaya" <<a href="mailto:eamaya@gmail.com" target="_blank">eamaya@gmail.com</a>>, "Scott Voll" <<a href="mailto:svoll.voip@gmail.com" target="_blank">svoll.voip@gmail.com</a>><br>
<b>Cc: </b><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br><b>Sent: </b>Thursday, September 13, 2012 1:09:35 PM<br><b>Subject: </b>Re: [cisco-voip] Audit trail on CM or UC<div>
<div class="h5"><br><br>Hi There,<br><br>Erick is correct, Variphy parse the CUCM Audit log to make it human readable. You can either upload the audit log manually to my software after grabbing it from RTMT or setup in RTMT to FTP the audit log files. Point Variphy to the location of the FTP server directory and we'll read them in automatically. After the audit log is read in, you filter out the "data noise" to see "who made that change".<br>
<br>Attached is a screenshot of our output of the feature in action.<br><br>Regards,<br><br>Chris<br><br><br><br><div class="gmail_quote">On Thu, Sep 13, 2012 at 11:35 AM, Erick Amaya <span dir="ltr"><<a href="mailto:eamaya@gmail.com" target="_blank">eamaya@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>There is third party application call Variphy that will keep track of changes in the cluster database, based on username logging. You might want to check it out there is also a host of other features you might be able to utilize like phone remote control and creating macro scrips to press selected keys on the hand set.<div>
<div><br><br>On Sep 13, 2012, at 11:21 AM, Lelio Fulgenzi <<a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a>> wrote:<br><br></div></div></div><div><div><div></div><blockquote>
<div><div style="font-size:10pt;font-family:Verdana">as far as I know, the only audit trail there is is a web page access audit trail which tells you what page someone went to. it doesn't give you a from/to audit, i.e. this data was changed from this to that.<br>
<br>there are front end management tools that give you that apparently, but then all your changes would have to go through that front end tool.<br><br>an audit trail would be very helpful in troubleshooting. but alas, it's not there. :(<br>
<span><br><span></span>---<br>Lelio Fulgenzi, B.A.<br>Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1<br>(519) 824-4120 x56354 (519) 767-1060 FAX (ANNU)<br>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>
Cooking with unix is easy. You just sed it and forget it. <br> - LFJ (with apologies to Mr. Popeil)<br><span></span><br></span><br><hr><b>From: </b>"Scott Voll" <<a href="mailto:svoll.voip@gmail.com" target="_blank">svoll.voip@gmail.com</a>><br>
<b>To: </b><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br><b>Sent: </b>Thursday, September 13, 2012 12:12:14 PM<br><b>Subject: </b>[cisco-voip] Audit trail on CM or UC<br><br>
What is our ability to audit who made changes to CM or UC? we are looking at giving our Helpdesk basic access, but we would like to know how we can see who made what changes.<div><br></div><div>TIA</div><div><br></div><div>
Scott</div><div>version 7.1 soon to be 8.6</div>
<br>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</div></div></blockquote><blockquote><div><span>_______________________________________________</span><br><span>cisco-voip mailing list</span><br><span><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a></span><br>
<span><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a></span><br></div></blockquote></div></div></div><br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
</blockquote></div>
</div></div></div></div></blockquote></div>
</div></body></html>