CUCM 6.1.3 User activities Auditing

Unanswered Question
May 4th, 2010
User Badges:

I need to know the configuration on CUCM done by users loged in to my CUCM.


For example :


user x changes css for 2000 at 1/1/2010


I need to know who user "x"


How I can get those info?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
William Bell Tue, 05/04/2010 - 07:33
User Badges:
  • Purple, 4500 points or more

Good link


However, the auditing capability discussed in the link isn't included in 6.1.3. It was added to 7.1.2 and later. That being said there still are traces you can look at. The problem is nothing is going to give the OP a record that says: "person X changed css Y on DATE-TIME". You would have to piece it together using the tomcat logs as a primary source of data. Even then, you need to know the pkid of the CSS (for example) in the database so that you can decipher the URIs stored in the tomcat web logs. Very hairy business.


If you want to give it a go, check out the tomcat logs here:


admin:file list activelog tomcat/logs/localhost* detail


HTH.


Regards,

Bill

youssef.ahmed Wed, 05/05/2010 - 02:03
User Badges:

Yes,good link.


But now how i can know the pkid of my CSSs?


BR,

Ahmed Kamal

youssef.ahmed Wed, 05/05/2010 - 02:26
User Badges:

i found that css has "pkid/name a1dd95eb-3d5c-e6a9-d1b8-6b7719c9e1af" as pkid.


Did all CSSs have the same pkid or it differs per CSS name?

William Bell Wed, 05/05/2010 - 05:39
User Badges:
  • Purple, 4500 points or more

Ahmed,


Each CSS will have a different pkid. The pkid (private key identifier?) is a unique value in each table of the database. It is also used to link tables to each other. I put together a high level primer on the db tables, pkid, and relationships in my blog:


http://www.netcraftsmen.net/resources/blogs/running-sql-queries-on-cucm-...


Just in case you are interested.


Now, a more direct response to your question. You can find out the calling search space with this pkid from the cli of any CUCM cluster node:


admin: run sql select name from callingsearchspace where pkid='a1dd95eb-3d5c-e6a9-d1b8-6b7719c9e1af'


OR (easier and quicker)


admin: run sql select pkid, name from callingsearchspace where pkid like '%6b7719c9e1af' (or similar "like" filter)


HTH.


Regards,

Bill

Please remember to rate helpful posts.

William Bell Wed, 05/05/2010 - 06:28
User Badges:
  • Purple, 4500 points or more

You are entering the command incorrectly.


admin: run sql select name from callingsearchspace where pkid='a1dd95eb-3d5c-e6a9-d1b8-6b7719c9e1af'


OR


admin: run sql select pkid, name from callingsearchspace where pkid like '%6b7719c9e1af' (or similar "like" filter)


You need to tell SQl what you want to select, where you want to select it from, and what to filter on. Also, you must put the single quotes (') around the search string (at least in this case).



Try it again using the correct syntax and see if that helps. Let me know if it works or if you need more assistance.


Regards,

Bill

Actions

This Discussion