CCUM 6.1 - syslog message

Answered Question
Feb 18th, 2010

Hey Guys,

I'm getting the below alert in the system logs on our publisher call manager. There is about 10 ever minute. Anybody know what is causing this?

Many Thanks

Date: Feb 19 08:44:01
Machine Name: xxxxx01

Severity: Info
Process:  sshd(pam_unix)[17637]
Message: : session opened for user sftpuser by (uid=0)

Date: Feb 19 08:44:01


Machine Name: xxxxx01
Severity: Info
Process:  sshd(pam_unix)[17633]
Message: : session closed for user sftpuser

Correct Answer by Jaime Valencia about 6 years 12 months ago

That SFTP does not mean a billing server, but the connection between PUB and SUBs to transfer flat files. You're hitting the bug, no way to get rid of the messages

HTH

java

If this helps, please rate

www.cisco.com/go/pdihelpdesk

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Jaime Valencia Thu, 02/18/2010 - 15:50

They're probably because of this bug:

CSCsi87129   
CDR File transfer from Agents to Repository generates excessive syslog

Symptom:

Constant alerts in the publisher's Syslog (Event Viewer - System Log). Seen at the rate of 4 per minute:

Feb 12 00:51:51 CCM-PUB auth 6 sshd(pam_unix)[31368]: session opened for user sftpuser by (uid=0)
Feb 12 00:51:51 CCM-PUB auth 6 sshd(pam_unix)[31368]: session closed for user sftpuser
Feb 12 00:51:52 CCM-PUB auth 6 sshd(pam_unix)[31372]: session opened for user sftpuser by (uid=0)
Feb 12 00:51:52 CCM-PUB auth 6 sshd(pam_unix)[31372]: session closed for user sftpuser

Conditions:

Sending CDR files to external SFTP server.
System Enterprise Parameter "CDR File Time Interval" is set to '1', which creates CDR files every 1 min

Workaround:

None. This is addressed in CUCM 7.0 and later, where a persistent SFTP connection is used.

Notice it's NOT an alert: Severity: Info

There is nothing to worry about.

HTH

java

If this helps, please rate

www.cisco.com/go/pdihelpdesk

alanc3141592654 Thu, 02/18/2010 - 20:54

Thanks for your reply!!

I guess there is no way of turning the logging off for this message?

thanks again

Alan

alanc3141592654 Thu, 02/18/2010 - 22:18

actually, the CDR files are being stored locally not visa SFTP

Any other thoughts?

Thanks,


A

Correct Answer
Jaime Valencia Fri, 02/19/2010 - 06:20

That SFTP does not mean a billing server, but the connection between PUB and SUBs to transfer flat files. You're hitting the bug, no way to get rid of the messages

HTH

java

If this helps, please rate

www.cisco.com/go/pdihelpdesk

Actions

This Discussion