<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
Add in the localhost access logs ( CSCsj01819 need http auditing equivalent to windows train ) and you get a pretty clear picture of who changed what and when.
<div><br>
</div>
<div>Agreed it is not perfect. It is better than the "nothing" described earlier in this thread.</div>
<div><br>
</div>
<div>Push for AAA/TACACS integration in UCM didn't get much support from the user community. Move toward Unified Provisioning may provide additional audit capabilities.</div>
<div><br>
</div>
<div>-Wes</div>
<div><br>
</div>
<div>
<div>
<div>On Feb 5, 2014, at 9:29 PM, Lelio Fulgenzi <<a href="mailto:lelio@uoguelph.ca">lelio@uoguelph.ca</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div dir="auto">
<div>A (true) audit log would not only have who made what change and from where, but what they changed - from what, to what. In the event of a deletion, a dump of what they deleted. </div>
<div><br>
</div>
<div>Ideally, you can use these audit logs (or are they transaction log?) to retrace the steps of an accidental deletion. </div>
<div><br>
</div>
<div>Especially with no real way to compare the current system with the most recent backup (or is there?) and restore what's missing, an audit log like this would be very helpful. </div>
<div><br>
</div>
<div>I've been meaning to look at what's available with the current reporting structure to do daily comparisons to see what's changed. </div>
<div><br>
</div>
<div>We had a very important PLAR go missing and noone knew who did it. </div>
<div><br>
</div>
<div>Just my two cents. <br>
<br>
Sent from my iPhone</div>
<div><br>
On 2014-02-05, at 7:11 PM, "Wes Sisk (wsisk)" <<a href="mailto:wsisk@cisco.com">wsisk@cisco.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite"><base href="x-msg://2942/">
<div>Have you checked this?</div>
<div><br>
</div>
<a href="http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/service/7_1_2/admin/saaulog.html">http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/service/7_1_2/admin/saaulog.html</a>
<div><br>
</div>
<div>What is the delta between this and what you really need?</div>
<div><br>
</div>
<div>-Wes</div>
<div><br>
<div>
<div>On Feb 5, 2014, at 2:44 PM, Jason Aarons (AM) <<a href="mailto:jason.aarons@dimensiondata.com">jason.aarons@dimensiondata.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div lang="EN-US" link="blue" vlink="purple" style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div class="WordSection1" style="page: WordSection1; ">
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); ">Your Cisco Account Manager would need to submit a PERS request (Product Enhancement Request).<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); "> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); ">Since Uplinx and other third parties sell such tools I would suspect Cisco won’t invest the capital needed to add this feature. But that is my opinion.<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); "> </span></div>
<div>
<div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(225, 225, 225); padding: 3pt 0in 0in; ">
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<b>From:</b><span class="Apple-converted-space"> </span>cisco-voip [mailto:cisco-<a href="mailto:voip-bounces@puck.nether.net" style="color: purple; text-decoration: underline; ">voip-bounces@puck.nether.net</a>]<span class="Apple-converted-space"> </span><b>On
Behalf Of<span class="Apple-converted-space"> </span></b>Thomas LeMay<br>
<b>Sent:</b><span class="Apple-converted-space"> </span>Wednesday, February 05, 2014 11:31 AM<br>
<b>To:</b><span class="Apple-converted-space"> </span>'Brian Meade (brmeade)'; 'James Dust';<span class="Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" style="color: purple; text-decoration: underline; ">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b><span class="Apple-converted-space"> </span>Re: [cisco-voip] [cisco-VoIP] Log file query<o:p></o:p></div>
</div>
</div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<o:p> </o:p></div>
<div style="margin: 0in 0in 12pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; "> </span><br class="webkit-block-placeholder">
</div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); ">Hi, Brian,<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); "> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); ">Will there ever be audit logs that specifically show exactly what was changed and by who? If not, can this become a road map request?<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); "> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); ">Thank you,<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); "> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); ">Tom<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); "> </span></div>
<div>
<div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(181, 196, 223); padding: 3pt 0in 0in; ">
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; ">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; "><span class="Apple-converted-space"> </span>cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" style="color: purple; text-decoration: underline; ">mailto:cisco-voip-bounces@puck.nether.net</a>]<span class="Apple-converted-space"> </span><b>On
Behalf Of<span class="Apple-converted-space"> </span></b>Brian Meade (brmeade)<br>
<b>Sent:</b><span class="Apple-converted-space"> </span>Wednesday, February 05, 2014 8:22 AM<br>
<b>To:</b><span class="Apple-converted-space"> </span>James Dust;<span class="Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" style="color: purple; text-decoration: underline; ">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b><span class="Apple-converted-space"> </span>Re: [cisco-voip] Log file query<o:p></o:p></span></div>
</div>
</div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); ">James,<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); "> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); ">The audit logs are going to be your best bet. They don’t give a ton of info on what specifically was changed though.<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); "> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); ">Brian<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="color: rgb(31, 73, 125); "> </span></div>
<div>
<div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(181, 196, 223); padding: 3pt 0in 0in; ">
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; ">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; "><span class="Apple-converted-space"> </span>cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" style="color: purple; text-decoration: underline; ">mailto:cisco-voip-bounces@puck.nether.net</a>]<span class="Apple-converted-space"> </span><b>On
Behalf Of<span class="Apple-converted-space"> </span></b>James Dust<br>
<b>Sent:</b><span class="Apple-converted-space"> </span>Wednesday, February 05, 2014 6:59 AM<br>
<b>To:</b><span class="Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" style="color: purple; text-decoration: underline; ">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b><span class="Apple-converted-space"> </span>[cisco-voip] Log file query<o:p></o:p></span></div>
</div>
</div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<o:p> </o:p></div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span lang="EN-GB" style="">Morning all,</span><span lang="EN-GB"><o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span lang="EN-GB" style=""> </span><span lang="EN-GB"><o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span lang="EN-GB" style="">I was just wondering if there is a log file I can export from CUCM to show what changes have been made in the past month?</span><span lang="EN-GB"><o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span lang="EN-GB" style=""> </span><span lang="EN-GB"><o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span lang="EN-GB" style="">For instance, to show what DN’s, phones and other changes have been made since a certain date.</span><span lang="EN-GB"><o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span lang="EN-GB" style=""> </span><span lang="EN-GB"><o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span lang="EN-GB" style="">Regards</span><span lang="EN-GB"><o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span lang="EN-GB" style=""> </span><span lang="EN-GB"><o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span lang="EN-GB" style="font-size: 10pt; font-family: Tahoma, sans-serif; ">James</span><span lang="EN-GB" style=""></span><span lang="EN-GB"><o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span lang="EN-GB" style=""> </span><span lang="EN-GB"><o:p></o:p></span></div>
</div>
<p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span lang="EN-GB" style="font-size: 12pt; font-family: Arial, sans-serif; "><br>
</span><strong><span lang="EN-GB" style="font-size: 7.5pt; font-family: Arial, sans-serif; color: rgb(153, 204, 0); ">Consider the environment - Think before you print</span></strong><span lang="EN-GB" style="font-size: 7.5pt; font-family: Arial, sans-serif; "><br>
</span><span lang="EN-GB" style="font-size: 10pt; font-family: Arial, sans-serif; "><br>
</span><span lang="EN-GB" style="font-size: 7.5pt; font-family: Arial, sans-serif; ">The contents of this email are confidential to the intended recipient and may not be disclosed. Although it is believed that this email and any attachments are virus free,
it is the responsibility of the recipient to confirm this.<span class="Apple-converted-space"> </span><br>
<br>
You are advised that urgent, time-sensitive communications should not be sent by email. We hereby give you notice that a delivery receipt does not constitute acknowledgement or receipt by the intended recipient(s).<br>
<br>
Details of Charles Stanley group companies and their regulators (where applicable), can be found at this URL<span class="Apple-converted-space"> </span></span><span lang="EN-GB" style="font-size: 10pt; font-family: Arial, sans-serif; "><a href="http://www.charles-stanley.co.uk/contact-us/disclosure/" title="http://www.charles-stanley.co.uk/contact-us/disclosure/" style="color: purple; text-decoration: underline; "><span style="font-size: 7.5pt; ">http://www.charles-stanley.co.uk/contact-us/disclosure/</span></a></span><span lang="EN-GB" style="font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p></o:p></span></p>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">
<span style="font-size: 12pt; font-family: 'Times New Roman', serif; "><br>
<br>
<span style="color: white; ">itevomcid</span><o:p></o:p></span></div>
</div>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" style="color: purple; text-decoration: underline; ">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" style="color: purple; text-decoration: underline; ">https://puck.nether.net/mailman/listinfo/cisco-voip</a></div>
</div>
<br>
</div>
</blockquote>
<blockquote type="cite"><span>_______________________________________________</span><br>
<span>cisco-voip mailing list</span><br>
<span><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a></span><br>
<span><a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a></span><br>
</blockquote>
</div>
</div>
<br>
</div>
</body>
</html>