I think you'll find that what's stored in the Cisco audit logs is not quite what you'd expect, it's only names and the pages they've accessed.
You'll need something that does a snapshot compare to truly know what changes were made. I took a look at a few and settled on Uplinx for a number of reasons (please - no vendor emails to me at this time telling me how their product is better). The biggest issue we had, was that Cisco still does not make visible all database entities for these products to dip into and create a snapshot. So some things are missing. --- Lelio Fulgenzi, B.A. Senior Analyst, Network Infrastructure Computing and Communications Services (CCS) University of Guelph 519-824-4120 Ext 56354 [email protected] www.uoguelph.ca/ccs Room 037, Animal Science and Nutrition Building Guelph, Ontario, N1G 2W1 From: cisco-voip [mailto:[email protected]] On Behalf Of naresh rathore Sent: Wednesday, June 14, 2017 11:18 PM To: [email protected] Subject: [cisco-voip] Audit log Configuration on CUCM, CUP, CUC and UCCX hi, I want to do configuration on CUCM. CUC, CUPS and UCCX so that these server send logs to remote syslog server when somebody make changes to the configuration on these servers. for that i configured following. tools > Audio Log Configuration Enable Audit Log Enable Purging Enable log rotation Remote Syslog: Server Name: <ip addr of syslog server> Remote Syslog Audit Event Level: Notice Database Audit Log Filter Settings: Enable audit log Debut Audit Level: Administrative Tasks Output Settings Enable audit log rotation Maximum number of Files: 40 No. of Files Deleted on Log Rotation: 20 Are above configuration steps are enough for the us to see the changes done on these servers? Regards Naray
_______________________________________________ cisco-voip mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-voip
