<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
+1 on what Daniel said.
<div><br>
</div>
<div>Scheduled trace collection with delete is the only way I can currently think of to do this out of the box. Some files, like install logs have long term value, not sure what your retention options are for those?</div>
<div><br>
</div>
<div>* It is possible to automate an ssh/CLI login and file manipulation, but the CLI find/delete doesn’t allow identification by data AFAIK</div>
<div>* We have long requested CSCsi21579 allow scheduling commands but still waiting. Maybe hit up your account team on this one.</div>
<div>* Setting a reduced number of files or file size will not guarantee < 7 days. That is always dependent on system utilization, traces configured, and the amount of tracing generated by the features used.</div>
<div>* RTMT serviceability API’s, which do file retrieval and delete, are now public: <a href="https://developer.cisco.com/site/collaboration/management/uc-manager-serviceability/develop-and-test/documentation/latest-version/">https://developer.cisco.com/site/collaboration/management/uc-manager-serviceability/develop-and-test/documentation/latest-version/</a> .
Retrieval includes delete option for RTMT. I don’t see it in the API, checking into that.</div>
<div><br>
</div>
<div>-Wes</div>
<div><br>
<div>
<div>On Sep 24, 2014, at 9:24 AM, Daniel Pagan <<a href="mailto:dpagan@fidelus.com">dpagan@fidelus.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<div lang="EN-US" link="blue" vlink="purple" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<div class="WordSection1" style="page: WordSection1;">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);">If you absolutely can’t have any log files older than seven days on disk, one option would be to configure and schedule trace archiving for all services and applications,
but make sure the “delete log files from the server” option is enabled.<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);"> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);">This would provide you with two things:<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);"> </span></div>
<div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 12pt; font-family: 'Times New Roman', serif; text-indent: -0.25in;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);"><span>1.<span style="font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';"> <span class="Apple-converted-space"> </span></span></span></span><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);">Log
files collected off CUCM will be deleted permanently. This won’t only include CCM but other services and applications as well such as CTI Mgr, LBM, Tomcat Security, syslogs, etc.<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);"> </span></div>
<div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 12pt; font-family: 'Times New Roman', serif; text-indent: -0.25in;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);"><span>2.<span style="font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';"> <span class="Apple-converted-space"> </span></span></span></span><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);">The
log files you archive to a separate disk and, more importantly, the length of time they’re stored on disk, can be managed on the archive server via the example provided by Wes below (if a *nix OS) or the forfiles command I mentioned in a previous email (if
a Windows OS).<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);"> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);">Keep in mind this has the potential to put the customer into a situation where reported issues might go nowhere due to missing trace information since only seven days are
retained. I’d also keep in mind the disk space required on your trace archiving server and overhead placed on CUCM – older version of CUCM don’t automatically zip trace files on disk and, depending on specs, gzip can and has contributed to higher-than-expected
CPU utilization. It will likely also include a very large number of log files needing to be transferred over FTP or SFTP, so there’s that to consider as well. You can minimize these two factors by scheduling it to occur once a day and during an after-hours
window while avoiding an overlap of any backup jobs. You can also try to avoid large LDAP sync jobs or the 3:15 AM garbage collection task but it’s probably unnecessary.<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);"> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);">I personally have never seen or configured CUCM trace and log archiving that encompassed so many services so I can’t really recommend it or speak from experience, but it,
in theory, would most certainly accomplish the goal of managing the duration of all CUCM log files on disk, not just CCM SDI/SDL.<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);"> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);">Hope this helps<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);"> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);">- Dan<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(64, 64, 64);"> </span></div>
<div>
<div style="border-style: solid none none; border-top-color: rgb(225, 225, 225); border-top-width: 1pt; padding: 3pt 0in 0in;">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<b><span style="font-size: 11pt; font-family: Calibri, sans-serif;">From:</span></b><span style="font-size: 11pt; font-family: Calibri, sans-serif;"><span class="Apple-converted-space"> </span>cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net">mailto:cisco-voip-bounces@puck.nether.net</a>]<span class="Apple-converted-space"> </span><b>On
Behalf Of<span class="Apple-converted-space"> </span></b>Martin Schmuker<br>
<b>Sent:</b><span class="Apple-converted-space"> </span>Tuesday, September 23, 2014 5:15 PM<br>
<b>To:</b><span class="Apple-converted-space"> </span>Wes Sisk (wsisk)<br>
<b>Cc:</b><span class="Apple-converted-space"> </span>Cisco VoIP Mailing List<br>
<b>Subject:</b><span class="Apple-converted-space"> </span>Re: [cisco-voip] Delete Log Files<o:p></o:p></span></div>
</div>
</div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<o:p> </o:p></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif;">Guys, thank you very much for your answers.<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif;"> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif;">Sorry that I did not explain, why we want to delete old files. The reason is stupid German law regarding protection of privacy. Customer asks to delete files after of 7 days. In this case it’s
not really a law, but client feels better :-(<o:p></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span style="font-size: 11pt; font-family: Calibri, sans-serif;"> </span></div>
<div style="border-style: none none none solid; border-left-color: blue; border-left-width: 1.5pt; padding: 0in 0in 0in 4pt;">
<div>
<div style="border-style: solid none none; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding: 3pt 0in 0in;">
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<b><span lang="DE" style="font-size: 10pt; font-family: Tahoma, sans-serif;">From:</span></b><span lang="DE" style="font-size: 10pt; font-family: Tahoma, sans-serif;"><span class="Apple-converted-space"> </span>Wes Sisk (wsisk) [</span><a href="mailto:wsisk@cisco.com" style="color: purple; text-decoration: underline;"><span lang="DE" style="font-size: 10pt; font-family: Tahoma, sans-serif;">mailto:wsisk@cisco.com</span></a><span lang="DE" style="font-size: 10pt; font-family: Tahoma, sans-serif;">]<span class="Apple-converted-space"> </span><br>
<b>Sent:</b><span class="Apple-converted-space"> </span>Tuesday, September 23, 2014 5:04 PM<br>
<b>To:</b><span class="Apple-converted-space"> </span>Martin Schmuker<br>
<b>Cc:</b><span class="Apple-converted-space"> </span>Cisco VoIP Mailing List<br>
<b>Subject:</b><span class="Apple-converted-space"> </span>Re: [cisco-voip] Delete Log Files<o:p></o:p></span></div>
</div>
</div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE"> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE">onbox logging is circular. It will consume as much space as allocated and then loop over that. If something goes awry then Log Partition Manager (LPM) will auto-delete files as necessary.<o:p></o:p></span></div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE"> </span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE">For Scheduled Trace Collection, </span><a href="http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/service/8_6_1/rtmt/rtmt/rttlc.html#wp1048184" style="color: purple; text-decoration: underline;"><span lang="DE">http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/service/8_6_1/rtmt/rtmt/rttlc.html#wp1048184</span></a><span lang="DE"><o:p></o:p></span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE"> </span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE">No, there is nothing built into CUCM to manage the consumed disk space on the trace archive server. If using a *nix box a cron’d ‘find’ command does pretty well.<o:p></o:p></span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE"> </span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE">some possible examples:<o:p></o:p></span></div>
</div>
<div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE" style="font-size: 8.5pt; font-family: Menlo, serif; color: rgb(83, 48, 225);"># find files modified in the last 1 day<o:p></o:p></span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE" style="font-size: 8.5pt; font-family: Menlo, serif;">find . -type f -mtime -1d<o:p></o:p></span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE" style="font-size: 8.5pt; font-family: Menlo, serif;"> </span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE" style="font-size: 8.5pt; font-family: Menlo, serif;">-1d<span class="Apple-converted-space"> </span><span style="color: rgb(195, 55, 32);">"within 1 day"</span><span class="Apple-converted-space"> </span>-mtime n[smhdw]<o:p></o:p></span></div>
</div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE"> </span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE">-Wes<o:p></o:p></span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE"> </span></div>
<div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE">On Sep 23, 2014, at 6:13 AM, Martin Schmuker <</span><a href="mailto:ms@bilobit.com" style="color: purple; text-decoration: underline;"><span lang="DE">ms@bilobit.com</span></a><span lang="DE">> wrote:<o:p></o:p></span></div>
</div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE"> </span></div>
<div>
<div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE">Guys, <o:p></o:p></span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE"> </span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE">is there any way to delete CUCM log files (aka traces) after x days?<o:p></o:p></span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE"> </span></div>
</div>
<div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE">Thanks, Martin<o:p></o:p></span></div>
</div>
</div>
<div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">
<span lang="DE">_______________________________________________<br>
cisco-voip mailing list<br>
</span><a href="mailto:cisco-voip@puck.nether.net" style="color: purple; text-decoration: underline;"><span lang="DE">cisco-voip@puck.nether.net</span></a><span lang="DE"><br>
</span><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" style="color: purple; text-decoration: underline;"><span lang="DE">https://puck.nether.net/mailman/listinfo/cisco-voip</span></a></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
</div>
</body>
</html>