I have a Cisco 2851 running CME. We've been experiencing a random problem where inbound calls do not ring the IP Phones (around 1 call in 200 inbound calls). To troubleshoot this TAC have requested I enabled detailed ephone debugging.
To capture the debugging I'm sending the messages to a syslog server. We also have another syslog server which is being used for CDR's. Both syslog servers are KIWI Syslog Daemon.
The problem is when we enable the debugging we loose some CDR's. I'm assuming that it's down to the syslog server not being able to process all the messages rather than the CME router not creating them as the routers CPU doesn't go above 12%.
Has anyone came across this issue before - is it the router not creating the CDR's or is it a problem with the (KIWI) syslog server?
From what I understand there's no way to filter syslog messages to difference syslog hosts on the router so I appear to be stuck between a rock and a hard place as I can't troubleshoot the inbound call problem without compromising CDR's.
Any help or advice would be appreciated.