Is there any way, third party plug-in or anything that would enable a customer to audit CallManager changes - i.e. who changed the phone number and when did they do it, who was "messing around" at the time it all went wrong?
Clearly a customer has a problem with their staff! :o)
I have been able to use the IIS logs to track down a particular user who made a change, more specifically reset something that reset multiple devices. The IIS logs can be found in c:\winnt\system32\logfiles\w3svc. You will want to look on all servers.
In the logs you will see the source address and the login ID. If the person was using remote desktop and the ID administrator then these logs won't help. But if the user was logged in from their PC or using MLA then you might be able to track down the user.
You will need to have some timeframe of when the affected device was reset. You can look into the application event logs for this. Then match the time in the IIS logs. The times printed in the IIS logs are GMT.
SIP traces provide key information in troubleshooting SIP Trunks, SIP
endpoints and other SIP related issues. Even though these traces are in
clear text, these texts can be gibberish unless you understand fully
what they mean. This document attempts to br...
Please find the attached HTML document, download and open it on your PC.
This provides an easy to use form where you simply answer a few
questions and it will render the proper jabber-config.xml file for you
to copy/paste. There is built in logic to verif...
CUCM Database Replication is an area in which Cisco customers and
partners have asked for more in-depth training in being able to properly
assess a replication problem and potentially resolve an issue without
involving TAC. This document discusses the bas...