Guest

Preview Tool

Cisco Bug: CSCvv49818 - ICM -Audit trail to be sent to syslog server

Last Modified

Aug 26, 2020

Products (1)

  • Cisco Unified Contact Center Enterprise

Known Affected Releases

11.6(2) 12.0(1) 12.5(1)

Description (partial)

Symptom:
Currently only system related events are sent to syslog server, however if there is config change made either via the AW or websetup, such event are not sent to the syslog server

Following event must be sent to syslog server for compliance.

-All interactive activity of privileged Functional IDs must be logged
Ex Any changes made by an administrator level user either via AW or websetup must be logged to syslog

-Changes to system security configuration must be logged
Any security related changes made either viw AW or websetup

- Non-security related configuration changes that are critical to delivery of the service that the system is intended to provide must be logged
Non security changes but critical changes that can bring down the system

- User initiated log modification must be logged/User initiated log deletion or stoppage must be logged
Any changes made to the audit logs in websetup or changes to the ems logs must be sent to syslog

Conditions:
Any ICM system
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.