Add in the localhost access logs ( CSCsj01819    need http auditing equivalent 
to windows train ) and you get a pretty clear picture of who changed what and 
when.

Agreed it is not perfect. It is better than the "nothing" described earlier in 
this thread.

Push for AAA/TACACS integration in UCM didn't get much support from the user 
community.  Move toward Unified Provisioning may provide additional audit 
capabilities.

-Wes

On Feb 5, 2014, at 9:29 PM, Lelio Fulgenzi 
<[email protected]<mailto:[email protected]>> wrote:

A (true) audit log would not only have who made what change and from where, but 
what they changed - from what, to what. In the event of a deletion, a dump of 
what they deleted.

Ideally, you can use these audit logs (or are they transaction log?) to retrace 
the steps of an accidental deletion.

Especially with no real way to compare the current system with the most recent 
backup (or is there?) and restore what's missing, an audit log like this would 
be very helpful.

I've been meaning to look at what's available with the current reporting 
structure to do daily comparisons to see what's changed.

We had a very important PLAR go missing and noone knew who did it.

Just my two cents.

Sent from my iPhone

On 2014-02-05, at 7:11 PM, "Wes Sisk (wsisk)" 
<[email protected]<mailto:[email protected]>> wrote:

Have you checked this?

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/service/7_1_2/admin/saaulog.html

What is the delta between this and what you really need?

-Wes

On Feb 5, 2014, at 2:44 PM, Jason Aarons (AM) 
<[email protected]<mailto:[email protected]>> wrote:

Your Cisco Account Manager would need to submit a PERS request (Product 
Enhancement Request).

Since Uplinx and other third parties sell such tools I would suspect Cisco 
won’t invest the capital needed to add this feature.  But that is my opinion.

From: cisco-voip 
[mailto:[email protected]<mailto:[email protected]>]
 On Behalf Of Thomas LeMay
Sent: Wednesday, February 05, 2014 11:31 AM
To: 'Brian Meade (brmeade)'; 'James Dust'; 
[email protected]<mailto:[email protected]>
Subject: Re: [cisco-voip] [cisco-VoIP] Log file query


Hi, Brian,

Will there ever be audit logs that specifically show exactly what was changed 
and by who?  If not, can this become a road map request?

Thank you,

Tom

From: cisco-voip [mailto:[email protected]] On Behalf Of Brian 
Meade (brmeade)
Sent: Wednesday, February 05, 2014 8:22 AM
To: James Dust; [email protected]<mailto:[email protected]>
Subject: Re: [cisco-voip] Log file query

James,

The audit logs are going to be your best bet.  They don’t give a ton of info on 
what specifically was changed though.

Brian

From: cisco-voip [mailto:[email protected]] On Behalf Of James 
Dust
Sent: Wednesday, February 05, 2014 6:59 AM
To: [email protected]<mailto:[email protected]>
Subject: [cisco-voip] Log file query

Morning all,

I was just wondering if there is a log file I can export from CUCM to show what 
changes have been made in the past month?

For instance, to show what DN’s, phones and other changes have been made since 
a certain date.

Regards

James


Consider the environment - Think before you print

The contents of this email are confidential to the intended recipient and may 
not be disclosed. Although it is believed that this email and any attachments 
are virus free, it is the responsibility of the recipient to confirm this.

You are advised that urgent, time-sensitive communications should not be sent 
by email. We hereby give you notice that a delivery receipt does not constitute 
acknowledgement or receipt by the intended recipient(s).

Details of Charles Stanley group companies and their regulators (where 
applicable), can be found at this URL 
http://www.charles-stanley.co.uk/contact-us/disclosure/


itevomcid
_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip

_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip

_______________________________________________
cisco-voip mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/cisco-voip

Reply via email to