Documentation Center
AlienVault® USM Appliance™

Cisco Unified Communications Manager

When you configure Cisco Unified Communications Manager to send log data to USM Appliance, you can use the Cisco Unified Communications Manager plugin to translate the raw log data into normalized events for analysis.

Device Details
Vendor Cisco
Device Type Management Platform
Connection Type Syslog
Data Source Name Cisco-cucm
Data Source ID 1926

Integrating Cisco Unified Communications Manager

Before you configure the Cisco Unified Communications Manager integration, you must have the IP Address of the USM Appliance Sensor.

To configure Cisco Unified Communications Manager to send Syslog messages to USM Appliance

  1. In the Cisco Unified Serviceability GUI, select Tools > Audit Log Configuration.
  2. In the Server field, select the server you want to export the audit log files from.
  3. Under Application Audit Log Settings:

    • Select Enable Log Rotation.
    • In the Server Name field, enter the USM Appliance IP address or hostname.
    • Keep the default settings for the Remote Syslog Audit Event Level, Maximum No. of Files, and Maximum File Size options.
  4. Click Save.

Plugin Enablement

For plugin enablement information, see Enable Plugins.

Additional Resources and Troubleshooting

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/service/10_0_1/admin/CUCM_BK_CDDBCDEB_00_cisco-unified-servicability-merge-100/CUCM_BK_CDDBCDEB_00_cisco-unified-servicability-merge-100_chapter_0110.html#CUCM_TP_AE0C4B84_00

For troubleshooting, refer to the vendor documentation:

https://www.cisco.com/c/en/us/support/unified-communications/unified-communications-manager-callmanager/products-troubleshooting-guides-list.html