Agent Mystery Login

[98866]

Hi All,

We have department who works from 9AM - 7PM. The issue is one agent login show 12:01 AM. which agent claim he never logged-in.This is the 2 time issue reported in 6 months but for a different agents....

The agent login via one-X agent.

Please help to find out the Mystery login.

Thanks In Advance!

 

[kyle555]

It might be in /var/log/ecs with the IP and the user's internal UID in CM.

If you have dadmin, you can do like "display internal-data 1234" for extension 1234 and it'll show you the internal user ID in CM that shows up in denial events and other logged events.

If that extension logged some sort of denial event at the time, then maybe finding their internal user ID and doing a 'grep -r "0x101" /var/log/ecs' without the single quotes, and if user 1234 happened to have UID 0x101, might show you a logged event with that extension and IP address.

That's my best guess.

 

[98866]

Hi Kyle555,

Thanks for the speedy response!

I use dadmin account and I see command display internal-data but it is not complete command since system is asking for me


""""Please enter one of the following object command words:

atd-port ext-map off-pbx-telephone
bconf-tab hunt-group susr_rec
bhist-tab isg-callr trk-port
bept_rec isg-cnfr uid-map
bri-port mmi-tab vc-tab
callr s-tab wireless-terminal
conf-tab sta-port

Or press CANCEL to cancel the command """""


Thanks In Advance!

 

[kyle555]

ext-map. sorry!

 

[jimbojimbo]

This is actually not that unusual. If using one-X Agent make sure it is not set to auto-login. Bouncing of the network, PC connectivity, system updates, etc. can result in a restart of the application. If set for auto-login this will result in the phone and/or agent being logged in.