When you configure Cisco Unified Communications Manager to send log data to USM Appliance, you can use the Cisco Unified Communications Manager plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin.

Plugin Information

Device	Details
Vendor	Cisco
Device Type	Management Platform
Connection Type	Syslog
Data Source Name	Cisco-cucm
Data Source ID	1926

Integrating Cisco Unified Communications Manager

Before you configure the Cisco Unified Communications Manager integration, you must have the IP Address of the USM Appliance Sensor.

To configure Cisco Unified Communications Manager to send Syslog messages to USM Appliance

1. In the Cisco Unified Serviceability GUI, select Tools > Audit Log Configuration.
2. In the Server field, select the server you want to export the audit log files from.

3. Under Application Audit Log Settings:

   • Select Enable Log Rotation.
   • In the Server Name field, enter the USM Appliance IP address or hostname.
   • Keep the default settings for the Remote Syslog Audit Event Level, Maximum No. of Files, and Maximum File Size options.
4. Click Save.

Plugin Enablement

For plugin enablement information, see Enable Plugins.

Additional Resources and Troubleshooting

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/service/10_0_1/admin/CUCM_BK_CDDBCDEB_00_cisco-unified-servicability-merge-100/CUCM_BK_CDDBCDEB_00_cisco-unified-servicability-merge-100_chapter_0110.html#CUCM_TP_AE0C4B84_00

For troubleshooting, refer to the vendor documentation:

https://www.cisco.com/c/en/us/support/unified-communications/unified-communications-manager-callmanager/products-troubleshooting-guides-list.html