<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
It uses data from a db table called registrationdynamic.
<div class=""><br class="">
</div>
<div class="">From what I recall this is only updated once per day (around midnight by default) so last registered will only get you to within a 24-hour period. To find the specific time the phone unregistered you have to go to the syslogs. </div>
<div class=""><br class="">
</div>
<div class="">As an example here is my lab 12.0 box. Note the Last Registered always shows “Now” for currently registered, “Never” for something that’s never registered, or the last time the update task ran and that phone happened to be registered.</div>
<div class=""><br class="">
<div class=""><img apple-inline="yes" id="9C674ABD-0E14-4A72-BF75-FD8B7E1521EB" src="cid:99637FA4-4208-406B-8257-AE83275B67DA@cisco.com" class=""></div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">-Ryan </div>
<br class="">
<div>
<div class="">On Sep 12, 2017, at 1:10 PM, Brian Meade <<a href="mailto:bmeade90@vt.edu" class="">bmeade90@vt.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div dir="ltr" class="">The RIS Database contains a LastActTimeStamp field which is when that device last registered in Epoch time.
<div class=""><br class="">
</div>
<div class="">The problem is you have to cross-reference between nodes as a device may have last registered to the publisher 2 years ago but is currently registered to a subscriber node.</div>
<div class=""><br class="">
</div>
<div class="">The new feature in 12.0 to track this on the webpage probably uses this field that's been there for a while.</div>
<div class=""><br class="">
</div>
<div class="">You can run "show risdb query phone" on each node to pull this information.</div>
</div>
<div class="gmail_extra"><br class="">
<div class="gmail_quote">On Tue, Sep 12, 2017 at 11:56 AM, Ben Amick <span dir="ltr" class="">
<<a href="mailto:bamick@humanarc.com" target="_blank" class="">bamick@humanarc.com</a>></span> wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72" class="">
<div class="m_-1019769852527561182WordSection1">
<p class="MsoNormal">I haven’t seen it mentioned before, but I feel like it’s a common thing to go through an audit old phones in the environment, but other than looking through lists of terminated users and cross referencing active users, I can’t think of
any good way to audit phones to see if they’re alive anymore, especially with softphones.
<u class=""></u><u class=""></u></p>
<p class="MsoNormal"><u class=""></u> <u class=""></u></p>
<p class="MsoNormal">In AD I would just pull a report with powershell of users/computers not logged in for >90 days, is there any comparable option in CUCM for inactive phones that you could audit against? Like last registration date or some such?<u class=""></u><u class=""></u></p>
<p class="MsoNormal"><u class=""></u> <u class=""></u></p>
<p class="MsoNormal"><span style="color:#595959" class="">Ben Amick<u class=""></u><u class=""></u></span></p>
<p class="MsoNormal"><span style="color:#595959" class="">Unified Communications Analyst<u class=""></u><u class=""></u></span></p>
<p class="MsoNormal"><u class=""></u> <u class=""></u></p>
</div>
</div>
<br class="">
Confidentiality Note: This message is intended for use only by the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is
not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received
this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. Thank you
<br class="">
______________________________<wbr class="">_________________<br class="">
cisco-voip mailing list<br class="">
<a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a><br class="">
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" rel="noreferrer" target="_blank" class="">https://puck.nether.net/<wbr class="">mailman/listinfo/cisco-voip</a><br class="">
<br class="">
</blockquote>
</div>
<br class="">
</div>
_______________________________________________<br class="">
cisco-voip mailing list<br class="">
<a href="mailto:cisco-voip@puck.nether.net" class="">cisco-voip@puck.nether.net</a><br class="">
https://puck.nether.net/mailman/listinfo/cisco-voip<br class="">
</div>
</div>
<br class="">
</div>
</body>
</html>