Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

IM and P User Login Logs.

Hey Guys,

 

Can I get a log which says "when a user logged in and logged out" of Jabber for Windows ?

 

Thanks

Varadarajan.R

  • Unified Communications Applications
Everyone's tags (4)
3 REPLIES
Cisco Employee

Hi Varadarajan,You can

Hi Varadarajan,

You can capture the CUPS Audit logs. The login information will be shown as below ( example )

08:29:12.131 |Message Received LogMessage   UserID : abcd  ClientAddress
: 192.168.11.2  Severity : 6  EventType : UserLogging  ResourceAccessed:
CUPCPA  EventStatus : Success  CompulsoryEvent : No  AuditCategory :
AdministrativeEvent  ComponentID : Cisco UP Client Profile Agent
AuditDetails : User login was successful. App ID: Cisco Tomcat Cluster ID:
Node ID: CUPS222.

HTH

Manish

New Member

Manish, I have an old version

Manish, I have an old version of CUPS (8.6.4).  My log looks like this.  Is this the same thing?

17:19:14.041 |LogMessage   UserID : cpetty@dgs.dgsystems.com/jabber_29783  ClientAddress : 10.0.12.64  Severity : 5  EventType : UserSessionCreation  ResourceAccessed: JSM  EventStatus : Success  AuditDetails : User Session Created  ComponentID : XCP Router  CompulsoryEvent : No  AuditCategory : UserEvent App ID: Cisco UP XCP Router Cluster ID: StandAloneClustera61ef Node ID: irvcups1

I also notice some of these events say "UserID : cpetty@dgs.dgsystems.com/composed  ClientAddress : unknown".  What are those?  They don't seem to be normal Jabber logins.

 

Thanks,

Craig

 

Cisco Employee

Hi Craig,Based on the

Hi Craig,

Based on the following

 EventType : UserSessionCreation  ResourceAccessed: JSM  EventStatus : Success  AuditDetails : User Session Created  ComponentID : XCP Router

If Application Auditing is enabled on Cisco Unified Presence, an audit log is written when a user's JSM Session is created. This can occur when a user logs in a client to Cisco Unified Presence.

I am not too sure about your second question though, will look into it if i get later if i get some time.

HTH

Manish

70
Views
0
Helpful
3
Replies