/mcpError Message %UC_EXTENSIONMOBILITY-3-NodeNotTrusted: %[TimeStamp=String][HostName=String] [AppID=String][ClusterID=String][NodeID=String]: Untrusted Node was contacted. Explanation Application could not establish secure connection (SSL handshake failure) with another application. It could be due to 1. Certificate for tomcat service where the application is hosted is not trusted (not present in the keytore) Recommended Action 1. Ensure that "tomcat-trust" keystore on each CCM node contains the tomcat certificates for every other node within a cluster (Logon to OS Administration Page -> Security -> Certificate Management -> Check the certificates in tomcat-trust). 2. If EMCC is enabled, then ensure that a bundle of all tomcat certificates (PKCS12) has been imported into the local tomcat-trust keystore (Logon to OS Administration Page -> Security -> Certificate Management -> Look for certificates in tomcat-trust). Error Message %UC_SYSAGENT-3-SyslogStringMatchFound: %[StringMatch=String][MatchedEvent=String] [AppID=String][ClusterID=String][NodeID=String]: The configured Syslog Alarm/message string had matched. Explanation Cisco Syslog Agent had detected an alarm which matches the configured string Recommended Action Take the necessary action based on the received string matched event Error Message %UC_SYSAGENT-3-HardwareFailure: %[hwStringMatch=String][AppID=String][ClusterID=String] [NodeID=String]: Hardware failure alarm is received. Explanation Cisco Syslog Agent had detected a hardware failure alarm Recommended Action Take the necessary action based on the received hardware failure event Error Message %UC_SYSAGENT-3-TCPRemoteSyslogDeliveryFailed: %[RemoteSyslogServerIP=String] [RecommendedTCPPort=String][Source=Enum][AppID=String][ClusterID=String] [NodeID=String]: Indicates a failure in delivering events to RemoteSyslogServer over TCP Explanation This alarm indicates a failure occurred in delivering the events to the configured remote syslog server. The reason could be that the configured syslog server is down, or TCP is not configured to port 601, or there is a network failure. Recommended Action Check that the configured remote syslog server is up, TCP protocol configured on the recommended port 601. If the issue persists, please contact Cisco Technical Assistance Center (TAC) for further support. Error Message - Enum Definitions Enum Definitions - Source Value Definition 0 Failure occurred while delivering alarm/audit events 1 Failure occurred while delivering Rsyslog generated 5/24/26, 3:34 AM System Error Messages for Cisco Unified Communications Manager 15 - Cisco https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/err_msgs/15_x/ccmalarms15.html 108/343