/mcpUsage Guidelines It is recommended to: • Take the system backup before running the command. • Collect the screen log information along with command line logs if the command fails and escalate it to Cisco TAC. • Ensure that only Cisco TAC runs the command. Note Command Modes Administrator (admin:) Requirements Command privilege level: 1 Allowed during upgrade: Yes Applies to: Unified Communications Manager and IM and Presence Service on Unified Communications Manager utils auditd This command starts, stops, and provides the status of the system auditing service. utils auditd {enable | disable | status} Syntax Description Description Parameters Enables the collection of audit logs. When enabled, the system monitors and records user actions as well as Linux events such as the creation and removal of users, as well as the editing and deleting of files . enable Disables the collection of audit logs. disable Displays the status of audit log collection. We recommend that you retrieve the audit log by using the Real-Time Monitoring Tool, but you can also retrieve it by using the CLI. status Command Modes Administrator (admin:) Usage Guidelines After the service has been enabled, it monitors and logs activity on the system. Be aware that the system auditing service logs a lot of information. Care must be taken not to overfill the disk. Requirements Command privilege level: 1 Allowed during upgrade: Yes Command Line Interface Reference Guide for Cisco Unified Communications Solutions, Release 15 and SUs 250 Utils Commands utils auditd
