Table 1. Threshold legend

Threshold value

Definition

0

Notification is triggered by UC Apps default threshold value.

N/A

There’s no significance for threshold here. All such events are notified. (Example: Insufficient Licenses, Unified CM Service failure and so on)

Specific numbers like 10/60/90

The threshold value is set for the notification to be triggered.

We monitor ungraceful shut down notifications on Dedicated Instance applications and will automatically clear the notifications after validating the applications. A support case isn’t required to address these notifications.

We periodically monitor and fix the cross-launch failures on Dedicated Instance applications. A support case isn’t required to address these notifications.
Table 2. Rule severity and priority legend
Rule severityPriority
Low Healthy
Medium Notice
Medium Minor
High Major
High Critical

Alarm

Alarm definition

Threshold

Priority

Product

Cisco: Control Hub Cross Launch Failure Alert

This alert periodically monitors the cross-launch of UC apps from Control Hub: Unified CM, Cisco Unified IM and Presence, Cisco Unity Connection, Cisco Emergency Responder, Expressway nodes and notifies the customer in case failure is detected.

Cross-Launch connectivity checks are triggered every 2 hours and alerts are generated if failure is detected from any node.

Notice

Unified CM, Cisco Unified IM and Presence, Cisco Unity Connection, Cisco Emergency Responder and Expressway

Cisco: Peering Connectivity Alert

Available for Dedicated Instance only.

This alert monitors the peering connectivity between router on Cisco end and router on customer end per data center, used by different types of peering (VPN, customer, partner).

Connectivity to these routers are monitored from each Dedicated Instance data center every 5 minutes. If a connectivity issue is observed for 2 consecutive failures, an alert is generated.

Critical Unified CM

Cisco: Cloud Connectivity Alert

Available for Dedicated Instance only.

This alert monitors the connectivity of cloud services such as APNS, Office 365, and Redsky.

Connectivity to these cloud services is monitored from each DI data center every 5 minutes. If a connectivity issue is observed for 2 consecutive failures, an alert is generated.

Critical Unified CM, Cisco Unity Connection, Cisco Emergency Responder

Cisco: Expressway-E Connectivity Alert

Available for Dedicated Instance only.

This alert is generated when the public IP of Expressway-E isn’t accessible from the public internet.

Connectivity checks are performed every 5 minutes, and an alert is generated if failure is observed for 2 consecutive times.

Critical Expressway-E

Cisco: CUCM Phone Registration Anomaly Alert

This alert monitors phone registration and deregistration across all Unified CM nodes, promptly notifying the customer of any device drop within 5-10 minutes

Device registration counts are collected periodically and analyzed against past data patterns to spot irregularities in device drop rates.

Notice Unified CM

Cisco: CUCM Call Restriction Transfer Failures High

Call Transfer Failure

0

Notice

Unified CM

Cisco: CUCM Call Restriction Shared Line Failures High

Shared Line Failure

0

Notice

Unified CM

Cisco: CUCM Call Restriction Pick Up Failures High

Call Pick-Up Feature failure

0

Notice

Unified CM

Cisco: CUCM Call Restriction Park Retrieval Failures High

Parked Calls Retrieval Failure

0

Notice

Unified CM

Cisco: CUCM Call Restriction Mid-Call Failures High

Failing during a midcall

0

Notice

Unified CM

Cisco: CUCM Call Restriction Meet Me Conference Failures High

Meet me conference Failure

0

Notice

Unified CM

Cisco: CUCM Call Restriction Logical Partition Failures Total High

Logical Partition Failure 0 Notice

Unified CM

Cisco: CUCM Call Restriction Forwarding Failures High Call Forwarding Failure 0 Notice

Unified CM

Cisco: CUCM Call Restriction Basic Call Failures High Basic call Failures 0 Notice

Unified CM

Cisco: CUCM Locations LBM % Video Bandwidth Used High Location bandwidth manager - Video Bandwidth exceeds threshold 90 Notice

Unified CM

Cisco: CUCM Locations LBM % Immersive Bandwidth Used High Location bandwidth manager - Immersive Bandwidth exceeds threshold 90 Notice

Unified CM

Cisco: CUCM Locations LBM % Audio Bandwidth Used High Location bandwidth manager - Audio Bandwidth exceeds threshold 90 Notice

Unified CM

Cisco: CUCM H323 Trunk Calls Completed are Outside Normal Range H.323 Trunk calls failure threshold breach 60 Minor

Unified CM

Cisco: CUCM H323 Trunk Calls Rejected Due to ICT Throttling High H.323 Trunk rejected calls threshold breach 0 Minor

Unified CM

Cisco: CUCM H323 Trunk Call Completion Rate Low H.323 Trunk completed calls lower than threshold 3 Minor

Unified CM

Cisco: SIP Trunk registered All remote peers are in service for this SIP trunk NA

Healthy

Unified CM

Cisco: SIP Trunk partially registered Some remote peers are out of service and unable to handle calls for this SIP trunk NA Minor

Unified CM

Cisco: SIP Trunk unregistered All remote peers are out of service and unable to handle calls for this SIP trunk NA Major

Unified CM

Cisco: CUCM SIP Trunk Calls Completed is Outside Normal Range SIP Trunk completed calls lower than threshold 50 Minor

Unified CM

Cisco: CUCM SIP Call Completion Rate Low SIP completed calls lower than threshold 3 Minor

Unified CM

CMS: CUCM MGCP Gateway Unregistered Cisco MGCP previously registered gateway has gone out of service NA Minor

Unified CM

Cisco: CUCM BRI Gateway Not Registered Cisco ISDN gateway has gone out of service NA Minor

Unified CM

Cisco: CUCM BRI D Channel OOS The D-channel indicated by this alarm has gone out of service NA Minor

Unified CM

Cisco: CUCM BRI B Channel OOS The B-channel indicated by this alarm has gone out of service NA Minor

Unified CM

Cisco: CUCM T1 CAS Calls Completed is Outside Normal Range T1 CAS completed calls lower than threshold 90 Minor

Unified CM

Cisco: CUCM T1 CAS Channel Utilization High T1 CAS Channel Utilization threshold breach 3 Notice

Unified CM

Cisco: CUCM % Web Dialer Servlet Calls Successful is Low Web Dialer Servlet successful calls % below threshold 90 Minor

Unified CM

Cisco: CUCM % Web Dialer App Calls Successful is Low Web Dialer App successful calls % below threshold 90 Minor

Unified CM

Cisco: CUCM CTI Route Point Unregistered Previously registered CTI Route Point has gone out of service NA Major

Unified CM

Cisco: CUCM CTI Port Unregistered Previously registered CTI Port has gone out of service NA Major

Unified CM

Cisco: CUCM Video Conf Bridge Out of Resource Count High Video Conference bridge - unable to utilize count threshold breach 0 Notice

Unified CM

Cisco: CUCM Video Conf Bridge % Resources Used High Video conference bridge - resource utilization threshold breach 90 Notice

Unified CM

Cisco: CUCM Video Conf Bridge % Conferences Used High Video conference bridge - utilization threshold breach 90 Notice

Unified CM

Cisco: CUCM MTP Out of Resource Count High MTP resource - not in use % threshold breach 0 Notice

Unified CM

Cisco: CUCM MTP Usage Exceeded Hardware Media Resource usage high indication using port usage NA Notice

Unified CM

Cisco: CUCM Transcoder Out of Resource Count High Transcoder - unable to utilize count threshold breach 0 Notice

Unified CM

Cisco: CUCM Transcoder Usage High Transcoder - resource utilization threshold breach 90 Notice

Unified CM

Cisco: CUCM MOH % MOH Unicast Resources Used High MOH Unicast - Resource utilization % High 90 Notice

Unified CM

Cisco: CUCM MOH % MOH Multicast Resources Used High MOH Multicast - Resource utilization % High 90 Notice

Unified CM

Cisco: CUCM Call Manager Calls Completed is Outside Normal Range Calls Completion out of range 3 Notice

Unified CM

Cisco: CUCM Video Out of Resources Represents the total number of times an attempt was made by Communications Manager to allocate a conference resource from this Cisco Telepresence MCU conference bridge device and failed. NA Notice

Unified CM

Cisco: CUCM VCB Out of Conferences Represents the total number of times an attempt was made by Communications Manager to allocate a conference resource from this Cisco Telepresence MCU conference bridge device and failed. NA Notice

Unified CM

Cisco: CUCM Other Station Devices had Registration Drop Represents the drop in the number of station devices other than Cisco hardware IP phones that are currently registered in the system (for example, Cisco IP softphone, CTI port, CTI route point, Cisco voice mail port). NA Minor

Unified CM

Cisco: CUCM Registered Analog Access Drop Exceeded Threshold Represents the drop of registered Cisco Analog Access gateways exceeding the configured threshold. NA Major

Unified CM

Cisco: CUCM MTP Out of Resources Represents the total number of times Communications Manager attempted to but failed to allocate an MTP resource from one of the MTP devices that is registered with this Communications Manager. This also means that no transcoders were available to act as MTPs. NA Notice

Unified CM

Cisco: CUCM MOH Out of Resources Represents the total number of times an attempt was made by Communications Manager to allocate a Music on Hold resource and failed. NA Notice

Unified CM

Cisco: CUCM MCU out of Resources Represents the total number of times an attempt was made by Communications Manager to allocate a conference resource from this Cisco Telepresence MCU conference bridge device and failed. NA Notice

Unified CM

Cisco: CUCM HW Conferences Out of Resources Hardware Media Resource usage high indication using port usage NA Notice

Unified CM

Cisco: CUCM Call Completion Rate Low Successful call completion rate low 0 Minor

Unified CM

Cisco: CUCM SIP Station Tokens Rejected High Represents the total number of token requests that have been rejected since the last Cisco Communications Manager restart. CCM rejects the token request if the number of outstanding tokens is greater than the number specified in the Cisco Communications Manager service parameter Maximum Phone Fallback Queue Depth. 0 Notice

Unified CM

Cisco: CUCM SIP Station New Registrations Rejected High Represents the total number of new REGISTRATION requests that have been rejected with a 486 Busy Here response and not placed on the NewRegistration queue since the last Cisco Communications Manager restart. REGISTRATION requests are rejected if the NewRegistration queue exceeds a programmed size. 0 Notice

Unified CM

Cisco: CUCM SIP Station DB Timeouts High Represents the number of new registrations that failed because of a timeout when attempting to retrieve the device configuration from the database. 0 Minor

Unified CM

Cisco: CUCM Calls Rejected Due to ICT Throttling High Represents the total number of calls rejected since the start of the Cisco Communications Manager service due to Intercluster Trunk (ICT) call throttling. 0 Minor

Unified CM

Cisco: CUCM HW Conf Out of Resource Count High Hardware Conference Not in use - count threshold breach 0 Notice

Unified CM

Cisco: CUCM HW Conf % Utilization High Hardware conference % Utilization threshold breach 90 Notice

Unified CM

Cisco: CUCM Media Resource Unregistered Hardware Media Resource usage high indication using port usage NA Minor

Unified CM

Cisco: CUCM FXS Gateway Unregistered Cisco MGCP FXS Device has unregistered. NA Major

Unified CM

Cisco: CUCM PRI Gateway Unregistered Cisco ISDN gateway has gone out of service. NA Major

Unified CM

Cisco: CUCM PRI Trunk Calls Completed is Outside Normal Range PRI Trunk calls completion failure threshold breach 3 Notice

Unified CM

Cisco: CUCM PRI Utilization High PRI Utilization threshold breach 90 Notice

Unified CM

Cisco: UC_JAVAAPPLICATIONS-3-CiscoDirSyncProcessFailedRetry: LDAPSync process failed LDAPSync process failed to sync user data on the configured agreement ID NA Minor

Unified CM

Cisco: UC_JAVAAPPLICATIONS-3-CiscoDirSyncProcessConnectionFailed: Dirsync failed to connect to LDAP server LDAPSync process failed to connect to LDAP host NA Minor

Unified CM

Cisco: UC_JAVAAPPLICATIONS-2-CiscoDirSyncProcessFailToStart: DirSync Synchronization Failed to Start LDAPSync process failed to start on the configured agreement id. NA Minor

Unified CM

Cisco: UC ANALOG POTS CABLE REINSERTED ON PORT POTS cable reinserted in the analog gateway NA Healthy

Unified CM

Cisco: UC ANALOG POTS CABLE REMOVED ON PORT POTS cable removed in the analog gateway NA Minor

Unified CM

Cisco: UC VGW MGCP PROCESS SHUTDOWN MGCP process shutdown on Voice gateway NA Major

Unified CM

Cisco CMS VoS tomcat-ECDSA CertValidLessthanADay The Validity of the Certificate indicated in the notification message is less than 24 hours. NA Minor Voice Operating System
Cisco CMS VoS tomcat-ECDSA CertValidfor7days Validity of the Certificate indicated in the notification less than 7 days. NA Minor Voice Operating System
Cisco CMS VoS cup-xmpp CertValidLessthanADay The Validity of the Certificate indicated in the notification message is less than 24 hours. NA Minor Voice Operating System
Cisco CMS VoS cup-xmpp CertValidfor7days Validity of the Certificate indicated in the notification less than 7 days. NA Minor Voice Operating System
Cisco CMS VoS Tomcat CertValidLessthanADay The Validity of the Certificate indicated in the notification message is less than 24 hours. NA Minor Voice Operating System
Cisco CMS VoS Tomcat CertValidfor7days Validity of the Certificate indicated in the notification less than 7 days. NA Minor Voice Operating System
Cisco CUCM RTMT:ExcessiveVoiceQualityReportsNormal This alert gets generated when the number of QRT problems that are reported during the configured time interval exceed the configured value. The default threshold specifies 0 within 60 minutes. Within threshold Healthy

Unified CM

Cisco CUCM RTMT:ExcessiveVoiceQualityReports This alert gets generated when the number of QRT problems that are reported during the configured time interval exceed the configured value. The default threshold specifies 0 within 60 minutes. Exceeds threshold Major

Unified CM

Cisco CUCM RTMT:NumberOfRegisteredDevicesExceeded Number of Registered Devices Exceeded on subscriber than the configured threshold NA Critical

Unified CM

Cisco CUCM RTMT:MediaListExhaustedNormal Media List Exhausted clearing Alarm NA Healthy

Unified CM

Cisco CUCM RTMT:MediaListExhausted The requested device type isn’t found in the media resource list or default list or the configured devices aren’t registered NA Notice

Unified CM

Cisco CUCM RTMT:RouteListExhaustedNormal Route List Exhausted clearing Alarm NA Healthy

Unified CM

Cisco CUCM RTMT:RouteListExhausted An available route couldn’t be found in the indicated route list NA Notice

Unified CM

Cisco CUCM RTMT:RecordingGatewayRegistrationRejected Gateway rejected registration request NA Minor

Unified CM

Cisco CUCM RTMT:RecordingSessionTerminatedUnexpectedly Recording session setup failed NA Notice

Unified CM

Cisco CUCM RTMT:RecordingGatewaySessionFailed Cause value indicates the reason the recording session terminated unexpectedly NA Major

Unified CM

Cisco CUCM RTMT:CDRFileDeliveryFailed (s)FTP delivery of CDR files to the Billing Server outside of the cluster failed because of timeout or other reasons. An email alert will be sent to the admin. NA Major

Unified CM

CISCO CMS CUCM:TranConnError A connection was established and immediately dropped before completing registration. Incomplete registration may indicate that a device is rehoming in the middle of registration. NA Notice

Unified CM

CISCO CMS CUCM:DuplicateLearnedPattern The Call Control Discovery (CCD) requesting service received the same hosted DN from multiple call control entities such as Unified CM Express or another Unified CM cluster. NA Minor

Unified CM

CISCO CMS CER: Call Failure to PSAP Call redirection to certain PSAP failed NA Critical Cisco Emergency Responder
CISCO CMS CER: Failed to call security Call redirection to Onsite Alert failed NA Critical Cisco Emergency Responder
CISCO CMS CER:CTI Port Unregistered CTI Port: <PORT_NUMBER> is in OUTOFSERVICE, trying after 10 seconds NA Major Cisco Emergency Responder
CISCO CMS CER:CTI Route Point Unregistered CTI Route Point is in OUTOFSERVICE, trying after 10 seconds NA Major Cisco Emergency Responder
CISCO CMS CER:PSAP Callback Failure Call from PSAP to phone failed NA Minor Cisco Emergency Responder
CISCO CMS CER:Failed to call security Call failure to security NA Critical Cisco Emergency Responder
CISCO CMS CER:Call Failure to PSAP Call failure to PSAP NA Critical Cisco Emergency Responder
CISCO CMS CER:PSAP Callback Failure Call failure from PSAP NA Critical Cisco Emergency Responder
CISCO CMS CER:Device (switch/ccm) is SNMP Unreachable CER not able to poll snmp to Switch/Unified CM node NA Minor Cisco Emergency Responder
Cisco: IM&P Cluster Node A Error Dynamic Alarm for node A failure in IM & Presence Cluster NA Major IM & Presence
Cisco: IM&P Cluster Multiple Nodes Error Dynamic Alarm for IM & Presence Cluster in Unhealthy state NA Critical IM & Presence
Cisco: IM&P Cluster Node B Error Dynamic Alarm for node B failure in IM & Presence Cluster NA Major IM & Presence
Cisco: CUCM SW Conferences Out of Resources Soft Conferences Out of Resources NA Notice

Unified CM

Cisco: CUCM Media Resource is Not Registered Media Resource out-of-service alarm NA Minor

Unified CM

Cisco CMS VoS Tomcat CertValidLessThanMonth The Validity of the Certificate indicated in the notification message is less than 30 days. NA Minor Voice Operating System
Cisco CMS VoS cup-xmpp CertValidLessThanMonth The Validity of the Certificate indicated in the notification message is less than 30 days. NA Minor Voice Operating System
CallAttemptBlockedByPolicy Call attempt blocked by a policy server, Customer owns the polict server! There may be other policy server alarms required NA Notice Unified CM
EMCCFailedInLocalCluster EMCC Customer responsibility: UC_EXTENSIONMOBILITY-3-EMCCFailedInLocalCluster NA Notice Unified CM
EMCCFailedInRemoteCluster EMCC Customer responsibility: UC_EXTENSIONMOBILITY-4-EMCCFailedInRemoteCluster NA Notice Unified CM
ILSDuplicateURI ILS Customer responsibility: UC_CALLMANAGER-4-ILSDuplicateURI NA Notice Unified CM
ILSHubClusterUnreachable ILS Customer responsibility: RTMT -UC_ILS-3-ILSHubClusterUnreachable NA Major Unified CM
ILSPeerLimitApproachingWarning ILS Customer responsibility: RTMT - UC_ILS-4-ILSPeerLimitApproachingWarning NA Major Unified CM
ILSPeerLimitExceeded ILS Customer responsibility: RTMT -UC_ILS-3-ILSPeerLimitExceeded NA Major Unified CM
ILSPwdAuthenticationFailed ILS Customer responsibility: RTMT- UC_ILS-3-ILSPwdAuthenticationFailed NA Major Unified CM
ILSTLSAuthenticationFailed ILS Customer responsibility: RTMT - UC_ILS-3-ILSTLSAuthenticationFailed NA Major Unified CM
RecordingGatewayRegistrationTimeout Recording customer owned: RTMT - UC_CALLMANAGER-3-RecordingGatewayRegistrationTimeout NA Major Unified CM
RecordingResourcesNotAvailable Recording is customer owned:RTMT- UC_CALLMANAGER-4-RecordingResourcesNotAvailable NA Major Unified CM
DuplicateDirectoryURI DuplicateDirectoryURI - IMP NA Notice IM & Presence
DuplicateUserid DuplicateUserid - IMP NA Notice IM & Presence
InvalidDirectoryURI InvalidDirectoryURI -IMP NA Notice IM & Presence
RemoteSurvivableNodeNotReachable Customer is responsible for reachability UC_Survivability-2-RemoteSurvivableNodeNotReachable NA Major Unified CM
LocationOutOfResource Location setting are customer responsibility. UC_RTMT-4-RTMT_ALERT: LocationOutOfResource NA Notice Unified CM
NumberOfRegisteredGatewaysDecreased Gateways and media resources will be customer owned. The ALERT cannot show a number but shows they registering and de-registeringUC_RTMT-2-RTMT_ALERT: NumberOfRegisteredGatewaysDecreased NA Minor Unified CM
NumberOfRegisteredGatewaysIncreased Gateways and media resources will be customer owned. The ALERT cannot show a number but shows they registering and de-registeringUC_RTMT-2-RTMT_ALERT: NumberOfRegisteredGatewaysIncreased NA Healthy Unified CM
NumberOfRegisteredMediaDevicesDecreased Gateways and media resources will be customer owned. The ALERT cannot show a number but shows they registering and de-registeringUC_RTMT-2-RTMT_ALERT: AlertName=NumberOfRegisteredMediaDevicesDecreased NA Minor Unified CM
NumberOfRegisteredMediaDevicesIncreased Gateways and media resources will be customer owned. The ALERT cannot show a number but shows they registering and de-registeringUC_RTMT-2-RTMT_ALERT: NumberOfRegisteredMediaDevicesIncreased NA Healthy Unified CM

Refer to Cisco Troubleshooting Guide and Web RTMT logs for further troubleshooting.