Table Of Contents
Cisco Intercompany Media Engine Alert Descriptions and Default Settings
BannedFromNetwork
IMEDistributedCacheCertificateExpiring
IMEDistributedCacheFailure
IMESdlLinkOutOfService
InvalidCertificate
InvalidCredentials
MessageOfTheDay
SWUpdateRequired
TicketPasswordChanged
ValidationsPendingExceeded
IMEDistributedCacheInactive
IMEQualityAlert
InsufficientFallbackIdentifiers
IMEServiceStatus
InvalidCredentials
TCPSetupToIMEFailed
TLSConnectionToIMEFailed
Related Topics
Cisco Intercompany Media Engine Alert Descriptions and Default Settings
This section provides information on Cisco Intercompany Media Engine alerts. Both the Cisco Unified Communications Manager server and the Cisco Intercompany Media Engine server generate a unique set of alerts when predefined conditions are met. You need to monitor alerts from both servers to determine the status of the Cisco Intercompany Media Engine product.
To access alerts, login to RTMT on the appropriate server, and choose System > Tools > Alert > Alert Central. For more information on working with alerts, refer to the Cisco Unified Real-Time Monitoring Tool Administration Guide.
The following list comprises the Cisco Intercompany Media Engine alerts, their definitions, and default settings:
Cisco Intercompany Media Engine Server Alerts
•
BannedFromNetwork
•
IMEDistributedCacheCertificateExpiring
•
IMEDistributedCacheFailure
•
IMESdlLinkOutOfService
•
InvalidCertificate
•
InvalidCredentials
•
MessageOfTheDay
•
SWUpdateRequired
•
TicketPasswordChanged
•
ValidationsPendingExceeded
Cisco Unified Communications Manager Server Alerts
•
IMEDistributedCacheInactive
•
IMEOverQuota
•
IMEQualityAlert
•
InsufficientFallbackIdentifiers
•
IMEServiceStatus
•
InvalidCredentials
•
TCPSetupToIMEFailed
•
TLSConnectionToIMEFailed
Additional Information
Related Topics
BannedFromNetwork
This alert indicates that network administrators have banned this Cisco IME server from the network (IME distributed cache ring), making this Cisco IME service fully or partly inoperative. Network administrators rarely ban servers but do so if they detect that the server is being used to launch malicious attacks into the network. If you receive this alert in error, contact TAC immediately.
Default Configuration
Table 12-1 Default Configuration for the BannedFromNetwork Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Alert
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Cisco IME service banned from network
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger alert on every poll
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
IMEDistributedCacheCertificateExpiring
This alert indicates the number of days that remain until the certificate that is used for the IME distributed cache expires. You must replace the certificate prior to expiration.
Default Configuration
Table 12-2 Default Configuration for the IMEDistributedCacheCertificateExpiring Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Warning
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Cisco IME distributed cache certificate about to expire. 14 days.
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger up to 1 alerts within 1440 minutes
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
IMEDistributedCacheFailure
This alert indicates the health of the IME distributed cache. A value of zero (red) means that the IME distributed cache is suffering from a significant problem such as one of the following conditions:
•
The Cisco IME cannot resolve issues after the network was partitioned. In this case, validation attempts may fail.
•
The Cisco IME service is not connected to the network at all and is unable to reach the bootstrap servers.
A value of one (yellow) indicates that the Cisco IME network is experiencing minor issues, such as connectivity between bootstrap servers or other Cisco IME network issues. Check for any alarms that may indicate why this counter is 1. A value of two indicates that IME distributed cache is functioning normally and the system is considered healthy.
Default Configuration
Table 12-3 Default Configuration for the IMEDistributedCacheFailure Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Alert
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
IME distributed cache failure in states
1: network experience minor issues
0: network in trouble
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger 1 alert within 60 minutes
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
IMESdlLinkOutOfService
This alert indicates that the Cisco IME service has lost communication with Cisco IME Config Manager services, such as Cisco AMC service or Cisco CallManager service.
This alert usually indicates that one of these services has gone down (either intentionally, for maintenance; or unintentionally, due to a service failure or connectivity failure).
Default Configuration
Table 12-4 Default Configuration for the IMESdlLinkOutOfService Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Critical
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
SDLLinkOOS event generated
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger alert on every poll
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
InvalidCertificate
This alert indicates that the administrator enabled the IME distributed cache on the Cisco IME server but omitted the configuration of a valid certificate or configured an incorrect certificate.
Default Configuration
Table 12-5 Default Configuration for the InvalidCertificate Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Alert
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Invalid certificate configured
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger alert on every poll
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
InvalidCredentials
The alert indicates that the Cisco Unified Communications Manager cannot connect to the Cisco IME server, because the username and password that are configured on Cisco Unified Communications Manager do not match those configured on the Cisco IME server.
The alert includes the username and password that were used to connect to the Cisco IME server as well as the IP address and name of the target Cisco IME server. To resolve this alert, log into the Cisco IME server and check that the username and password that are configured match those configured in Cisco Unified Communications Manager.
Default Configuration
Table 12-6 Default Configuration for the InvalidCredentials Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Error
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Invalid or mismatched credentials.
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger alert on every poll
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
MessageOfTheDay
The Cisco IME service generates this alert when the administrators of the Cisco IME network have a message for you.
Default Configuration
Table 12-7 Default Configuration for the MessageOfTheDay Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Notice
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Message from network administrators
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger up to 1 alert within 1440 minutes
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
SWUpdateRequired
The Cisco IME server generates this alert when a new version of the Cisco IME server software is required. This alert repeats until you perform the upgrade. To obtain more information about the software update, go to the Cisco website. You should install critical updates within days of receiving this alert.
These upgrades address security vulnerabilities or key functional outages. In some cases, if you do not apply a critical upgrade immediately, the Cisco IME server may become unable to connect to the network.
Default Configuration
Table 12-8 Default Configuration for the SWUpdateRequired Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Warning
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Software update required
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger up to 1 alerts within 60 minutes
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
TicketPasswordChanged
The Cisco IME server generates this alert when the administrator changes the password that is used to generate the validation tickets.
Verify that an authorized administrator changed the password. Unauthorized changes may indicate compromise to the administrative interfaces on the Cisco IME service. If you determine that unauthorized changes have been made, change the administrative passwords on the Cisco IME server immediately to prevent further unauthorized access. To change the administrative password, type set password admin in the Cisco IME server CLI.
Default Configuration
Table 12-9 Default Configuration for the TicketPasswordChanged Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Notice
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Ticket password changed
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger on every poll
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
ValidationsPendingExceeded
This alert indicates the number of pending validations on the Cisco IME server. This number provides an indicator of the backlog of work on the Cisco IME server.
Default Configuration
Table 12-10 Default Configuration for the ValidationsPendingExceeded Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Critical
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Cisco IME pending validations exceeded 100
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger up to 1 alerts within 60 minutes
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
IMEDistributedCacheInactive
This alarm gets generated when a Cisco Unified Communications Manager attempts to connect to the Cisco IME server, but the IME distributed cache is not currently active.
Ensure that the certificate for the Cisco IME server is provisioned and that the IME distributed cache has been activated via the CLI.
Default Configuration
Table 12-11 Default Configuration for the IMEDistributedCacheInactive Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Error
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Inactive IME Distributed Cache
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger alert on every poll
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
This alert indicates that the Cisco Unified Communications Manager servers that use this Cisco IME service have exceed the quota for published direct inward dialing numbers (DIDs) to the IME distributed cache. The alert includes the name of the Cisco IME server as well as the current and target quota values.
Ensure that you have correctly provisioned the DID prefixes on all of the Cisco Unified Communications Manager servers that use this Cisco IME service.
If you have provisioned the prefixes correctly, you have exceeded the capacity of your Cisco IME service, and you need to configure another service and divide the DID prefixes across the Cisco IME client instances (Cisco Unified Communications Managers) on different Cisco IME services.
Default Configuration
Table 12-12 Default Configuration for the IMEOverQuota Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Alert
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
VAP over quota
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger alert on every poll
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
IMEQualityAlert
This alert gets generated when Cisco Unified Communications Manager determines that a substantial number of Cisco IME calls fail back to PSTN or fail to be set up due to IP network quality problems. Two types of events trigger this alert:
•
A large number of the currently active Cisco IME calls have all requested fallback or have fallen back to the PSTN.
•
A large number of the recent call attempts have gone to the PSTN and not been made over IP.
When you receive this alert, check your IP connectivity. If no problems exist with the IP connectivity, you may need to review the CDRs, CMRs, and logs from the firewalls to determine why calls have fallen back to the PSTN or have not been made over IP.
Default Configuration
Table 12-13 Default Configuration for the IMEQualityAlert Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Error
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Cisco IME link quality problem
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger alert on every poll
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
InsufficientFallbackIdentifiers
This alert gets generated when too many Cisco IME calls that are currently in progress use the same fallback DID and no more DTMF digit sequences exist to allocate to a new Cisco IME call that Cisco Unified Communications Manager is processing. The new call continues, but the call cannot fallback to the PSTN if voice-quality deteriorates.
If this alert gets generated, note the fallback profile that associates with this call. Check that profile in Cisco Unified Communications Manager Administration, and examine the current setting for the "Fallback Number of Correlation DTMF Digits" field. Increase the value of that field by one, and check whether the new value eliminates these alerts. In general, this parameter should be large enough so that the number of simultaneous Cisco IME calls that are made to enrolled numbers that associate with that profile is always substantially less than 10 raised to the power of this number. For example, if you always have fewer than 10,000 simultaneous Cisco IME calls for the patterns that associate with this fallback profile, setting this value to 5 (10 to the power of 5 equals 100,000) should keep Cisco Unified Communications Manager from generating this alert.
However, increasing this value results in a small increase in the amount of time it takes to perform the fallback. As such, you should set the "Fallback Number of Correlation DTMF Digits" field to a value just large enough to prevent this alert from getting generated.
Instead of increasing the value of the DTMF digits field, you can add another fallback profile with a different fallback DID and associate that fallback profile with a smaller number of enrolled patterns. If you use this method, you can use a smaller number of digits.
Default Configuration
Table 12-14 Default Configuration for the InsufficientFallbackIdentifiers Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Error
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Cannot allocate fallback identifier
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger up to 1 alerts within one minute
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
IMEServiceStatus
This alert indicates the overall health of the connection to the Cisco IME services for a particular Cisco IME client instance (Cisco Unified Communications Manager). The alert indicates the following states:
•
0—Unknown. Likely indicates that the Cisco IME service has not been activated.
•
1—Healthy. Indicates that the Cisco Unified Communications Manager has successfully established a connection to its primary and backup servers for the Cisco IME client instance, if configured.
•
2—Unhealthy. Indicates that the Cisco IME has been activated but has not successfully completed handshake procedures with the Cisco IME server. Note that this counter reflects the handshake status of both the primary and the secondary IME servers.
Default Configuration
Table 12-15 Default Configuration for the IMEServiceStatus Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Critical
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
VAP Connection Problem
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger up to 1 alert every 60 minutes
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
InvalidCredentials
The alert indicates that the Cisco Unified Communications Manager cannot connect to the Cisco IME server because the username and/or password configured on Cisco Unified Communications Manager do not match those configured on the Cisco IME server.
The alert includes the username and password that were used to connect to the Cisco IME server as well as the IP address and name of the target Cisco IME server. To resolve this alert, log into the Cisco IME server and check that the configured username and password match the username and password that are configured in Cisco Unified Communications Manager.
Default Configuration
Table 12-16 Default Configuration for the InvalidCredentials Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Alert
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Credential Failure to Cisco IME server
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger alert on every poll
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
TCPSetupToIMEFailed
This alert occurs when Cisco Unified Communications Manager cannot establish a TCP connection to a Cisco IME server. This alert typically occurs when the IP address and port of the Cisco IME server are misconfigured in Cisco Unified Communications Manager Administration or when an Intranet connectivity problem exists and prevents the connection from being set up.
Ensure that the IP address and port of the Cisco IME server in the alert are valid. If the problem persists, test the connectivity between the Cisco Unified Communications Manager servers and the Cisco IME server.
Default Configuration
Table 12-17 Default Configuration for the TCPSetupToIMEFailed Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Critical
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
Connection Failure to Cisco IME server
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger alert on every poll
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
TLSConnectionToIMEFailed
This alert occurs when a TLS connection to the Cisco IME service could not be established because the certificate presented by the Cisco IME service has expired or is not in the Cisco Unified Communications Manager CTL.
Ensure that the Cisco IME service certificate has been configured into the Cisco Unified Communications Manager.
Default Configuration
Table 12-18 Default Configuration for the TLSConnectionToIMEFailed Alert
Value
|
Default Configuration
|
Enable Alert
|
Selected
|
Severity
|
Alert
|
Enable/Disable this alert on the following servers
|
Enabled on listed servers
|
Threshold
|
Trigger alert when following condition met:
TLS Failure to Cisco IME service
|
Duration
|
Trigger alert immediately
|
Frequency
|
Trigger alert on every poll
|
Schedule
|
24 hours daily
|
Enable Email
|
Selected
|
Trigger Alert Action
|
Default
|
Related Topics
•
Cisco IME Configuration in Cisco Unified Communications Manager Administration, page 3-1
•
Using RTMT with Cisco Intercompany Media Engine, page 7-1
•
Cisco Unified Real Time Monitoring Tool Administration Guide