Administration Guide for Cisco Unified Communications Manager, Release 15 and SUs - Audit Logs

Publisher

Cisco Systems

URL

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/15/adminGd/cucm_b_administration-guide-15/cucm_b_test-adminguide_chapter_010100.html

Published

2026-08-31

Updated

unknown

Accessed

2026-09-25

HTTP status

200

License

Cisco copyright; all rights reserved; no-redistribution; short excerpts and locators only

Source notes citing this source

• Audit logging is configured in Cisco Unified Serviceability under Tools > Audit Log Configuration. Changing it requires the Audit role, which the CCMAdministrator account holds by default. in context
• Application audit logging is on by default. Database audit logging and system (auditd) audit logging are off by default, and auditd is enabled from the CLI with utils auditd. in context
• Cisco warns that database audit logging can generate large amounts of data quickly and can significantly affect performance during heavy use. in context
• The Audit Logs chapter says the remote syslog server and IPsec between each cluster node and that server must be set up before remote audit logging is configured. in context
• Remote audit logging to syslog uses UDP by default in normal mode and can be changed to TCP or TLS. TLS supports unidirectional or bidirectional X.509 authentication. in context

Cite this source record

APA

WarmTransfer. (2026, August 31). Administration Guide for Cisco Unified Communications Manager, Release 15 and SUs - Audit Logs. WarmTransfer. https://warmtransfer.net/knowledge/sources/cisco-cucm-admin15-audit-logs

BibTeX

@misc{warmtransfer-cisco-cucm-admin15-audit-logs,
  title  = {Administration Guide for Cisco Unified Communications Manager, Release 15 and SUs - Audit Logs},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/cisco-cucm-admin15-audit-logs},
  note   = {Cisco Systems, accessed 2026-09-25}
}