Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CUCM 6.1.3 User activities Auditing

I need to know the configuration on CUCM done by users loged in to my CUCM.

For example :

user x changes css for 2000 at 1/1/2010

I need to know who user "x"

How I can get those info?

7 REPLIES

Re: CUCM 6.1.3 User activities Auditing

Read the following for more info:

http://www.netcraftsmen.net/resources/blogs/audit-logs-on-cucm.html?blogger=William+Bell

Hailey

Please rate helpful posts!

Re: CUCM 6.1.3 User activities Auditing

Good link

However, the auditing capability discussed in the link isn't included in 6.1.3. It was added to 7.1.2 and later. That being said there still are traces you can look at. The problem is nothing is going to give the OP a record that says: "person X changed css Y on DATE-TIME". You would have to piece it together using the tomcat logs as a primary source of data. Even then, you need to know the pkid of the CSS (for example) in the database so that you can decipher the URIs stored in the tomcat web logs. Very hairy business.

If you want to give it a go, check out the tomcat logs here:

admin:file list activelog tomcat/logs/localhost* detail

HTH.

Regards,

Bill

HTH -Bill (b) http://ucguerrilla.com (t) @ucguerrilla

Please remember to rate helpful responses and identify

New Member

Re: CUCM 6.1.3 User activities Auditing

Yes,good link.

But now how i can know the pkid of my CSSs?

BR,

Ahmed Kamal

New Member

Re: CUCM 6.1.3 User activities Auditing

i found that css has "pkid/name a1dd95eb-3d5c-e6a9-d1b8-6b7719c9e1af" as pkid.

Did all CSSs have the same pkid or it differs per CSS name?

Re: CUCM 6.1.3 User activities Auditing

Ahmed,

Each CSS will have a different pkid. The pkid (private key identifier?) is a unique value in each table of the database. It is also used to link tables to each other. I put together a high level primer on the db tables, pkid, and relationships in my blog:

http://www.netcraftsmen.net/resources/blogs/running-sql-queries-on-cucm-6x7x-using-axl-soap-toolkit-part-1.html

Just in case you are interested.

Now, a more direct response to your question. You can find out the calling search space with this pkid from the cli of any CUCM cluster node:

admin: run sql select name from callingsearchspace where pkid='a1dd95eb-3d5c-e6a9-d1b8-6b7719c9e1af'

OR (easier and quicker)

admin: run sql select pkid, name from callingsearchspace where pkid like '%6b7719c9e1af' (or similar "like" filter)

HTH.

Regards,

Bill

Please remember to rate helpful posts.

HTH -Bill (b) http://ucguerrilla.com (t) @ucguerrilla

Please remember to rate helpful responses and identify

New Member

Re: CUCM 6.1.3 User activities Auditing

i got the following error as per attachment.

Re: CUCM 6.1.3 User activities Auditing

You are entering the command incorrectly.

admin: run sql select name from callingsearchspace where pkid='a1dd95eb-3d5c-e6a9-d1b8-6b7719c9e1af'

OR

admin: run sql select pkid, name from callingsearchspace where pkid like '%6b7719c9e1af' (or similar "like" filter)

You need to tell SQl what you want to select, where you want to select it from, and what to filter on. Also, you must put the single quotes (') around the search string (at least in this case).

Try it again using the correct syntax and see if that helps. Let me know if it works or if you need more assistance.

Regards,

Bill

HTH -Bill (b) http://ucguerrilla.com (t) @ucguerrilla

Please remember to rate helpful responses and identify

479
Views
0
Helpful
7
Replies