CCUM 6.1 - syslog message

Answered Question
Feb 18th, 2010
User Badges:

Hey Guys,


I'm getting the below alert in the system logs on our publisher call manager. There is about 10 ever minute. Anybody know what is causing this?


Many Thanks


Date: Feb 19 08:44:01
Machine Name: xxxxx01

Severity: Info
Process:  sshd(pam_unix)[17637]
Message: : session opened for user sftpuser by (uid=0)

Date: Feb 19 08:44:01


Machine Name: xxxxx01
Severity: Info
Process:  sshd(pam_unix)[17633]
Message: : session closed for user sftpuser

Correct Answer by Jaime Valencia about 7 years 5 months ago

That SFTP does not mean a billing server, but the connection between PUB and SUBs to transfer flat files. You're hitting the bug, no way to get rid of the messages


HTH


java


If this helps, please rate


www.cisco.com/go/pdihelpdesk

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Jaime Valencia Thu, 02/18/2010 - 15:50
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    2011

They're probably because of this bug:


CSCsi87129   
CDR File transfer from Agents to Repository generates excessive syslog


Symptom:

Constant alerts in the publisher's Syslog (Event Viewer - System Log). Seen at the rate of 4 per minute:

Feb 12 00:51:51 CCM-PUB auth 6 sshd(pam_unix)[31368]: session opened for user sftpuser by (uid=0)
Feb 12 00:51:51 CCM-PUB auth 6 sshd(pam_unix)[31368]: session closed for user sftpuser
Feb 12 00:51:52 CCM-PUB auth 6 sshd(pam_unix)[31372]: session opened for user sftpuser by (uid=0)
Feb 12 00:51:52 CCM-PUB auth 6 sshd(pam_unix)[31372]: session closed for user sftpuser

Conditions:

Sending CDR files to external SFTP server.
System Enterprise Parameter "CDR File Time Interval" is set to '1', which creates CDR files every 1 min

Workaround:

None. This is addressed in CUCM 7.0 and later, where a persistent SFTP connection is used.


Notice it's NOT an alert: Severity: Info

There is nothing to worry about.


HTH


java


If this helps, please rate


www.cisco.com/go/pdihelpdesk

alanc3141592654 Thu, 02/18/2010 - 20:54
User Badges:

Thanks for your reply!!


I guess there is no way of turning the logging off for this message?


thanks again


Alan

alanc3141592654 Thu, 02/18/2010 - 22:18
User Badges:

actually, the CDR files are being stored locally not visa SFTP


Any other thoughts?


Thanks,


A

Correct Answer
Jaime Valencia Fri, 02/19/2010 - 06:20
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    2011

That SFTP does not mean a billing server, but the connection between PUB and SUBs to transfer flat files. You're hitting the bug, no way to get rid of the messages


HTH


java


If this helps, please rate


www.cisco.com/go/pdihelpdesk

Actions

This Discussion