Chat now with support
Chat with Support

Unified Communications Analytics 8.8.1 - Deployment Guide

Prerequisites for your installation Installing UC Analytics Configuring UC Analytics Adding data sources for Active Directory or Azure Active Directory Adding data sources, chargeback costs, and thresholds for Exchange and Exchange Online
Permissions needed to collect Exchange on-premises or hybrid data Permissions needed to collect from native Exchange Online Creating an Exchange Configuration data source Creating an Exchange Tracking Logs data source Creating an Exchange Mailbox Contents data source Do I need both Exchange Tracking Logs and Exchange Mailbox Contents collections? Creating an Exchange IIS Logs data source Creating an Exchange Mailbox Content Summary data source Creating an Exchange Calendar data source Creating an Exchange Public Folders data source Adding Exchange Online hybrid data sources for hybrid Office 365 Adding Exchange Online data sources for native Office 365 Setting chargeback costs for Exchange Setting thresholds for Exchange metrics Omitting words when filtering by subject or body
Adding data sources, chargeback costs, and thresholds for Skype for Business/Lync Adding data sources, chargeback, and thresholds for Cisco Managing which insights can seen by users Configuring and managing subscriptions Making changes to your deployment Appendix A:Configuring Exchange and Office 365 Appendix B:Configuring the Skype for Business or Lync Server Appendix C:Configuring IIS Log Files to capture ActiveSync or OWA events Appendix D:PowerShell cmdlets used by data sources Appendix E:Backup and recovery options Appendix F:Custom configurations Appendix G: Questions and answers about UC Analytics

Configuring IIS if Exchange is hosted on Windows 2003 Server

Use the following procedure to configure IIS logging if Exchange is hosted on a Windows 2003 server.

To configure IIS logging on Exchange hosted on a Windows 2003 server

If you do not have the Internet Information Services (IIS) Manager MMC snap-in added, start at step 1.

If the snap-in is already installed, start at step 7.

1
From the Start menu, select Run.
2
Type mmc, and click OK.
3
In the Console dialog box, select File | Add/Remove Snap-in.
4
Click Add.
5
Select Internet Information Services and click Add.
6
Click Close and click OK.
7
In the treeview, browse to the Web Sites node.
8
Right-click the web site that you want and select Properties.
9
On the Web Site property sheet, click Properties in the Enable Logging section.
10
Select the Advanced Properties tab.
11
To collect ActiveSync events, ensure that the following fields are selected:
•
Date (date)
•
Time (Time)
•
User Name (cs-username)
•
Server name (s-computername)
•
Server IP Address (s-ip)
•
URI Stem (cs-uri-stem)
•
URI Query (cs-uri-query)
•
Protocol Status (sc-status)
•
Bytes Sent (sc-bytes)
•
Bytes Received (cs-bytes)
•
Time Taken (time-taken)
•
User Agent (cs(User-Agent))
•
Protocol Substatus (sc-substatus)
12
To collect Outlook on the Web (OWA) logons, ensure that the following fields are selected:
•
Date (date).
•
Time (time):
•
User Name (cs-username):
•
Method (cs-method)
•
URI Stem (cs-uri-stem)
•
Protocol Status (sc-status)
•
User Agent (cs(User-Agent))
•
Cookie (cs(Cookie)).
•
Referer (cs(Referer))
•
Server IP Address (s-ip):
•
Server Name (s-computername)
•
Client IP Address (c-ip):
13
Click OK.
14
Under the General tab, ensure that the New Log Schedule is set to hourly or daily. UC Analytics does not support weekly, monthly, or unlimited log file size for the log file rollover schedule.
15
Click OK and close the console.

Configuring IIS Logging if Exchange is hosted on Windows Server 2008 or later

If you have Exchange hosted on Windows Server 2008 or Windows Server 2008 R2 (IIS 7), or Windows Server 2012 (IIS 8), you must install the IIS Management Scripts and Tools on the Exchange CAS server. The IIS Management Scripts and Tools are required to allow UC Analytics to gather the IIS log files.

You must also configure the W3C Extended Log File Format for IIS logging on the Exchange server.

To configure IIS logging on Exchange hosted on Windows 2008 Server or later
1
Click Start and select Administrative Tools | Internet Information Services (IIS) Manager.
- OR -
In the Server Manager, select the Web Server (IIS) and open the Internet Information Services (IIS) Manager.
2
On the left, open the dropdown menu under the Start Page option.
3
Select the default Web Site.
4
Double-click Logging.
5
On the Logging page, in the Log file section set the Format to W3C and click Select Fields.
6
To collect ActiveSync events, ensure that the following W3C Logging fields are selected:
•
Date (date)
•
Time (time)
•
User Name (cs-username)
•
Server name (s-computername)
•
Server IP Address (s-ip)
•
URI Stem (cs-uri-stem)
•
URI Query (cs-uri-query)
•
Protocol Status (sc-status)
•
Bytes Sent (sc-bytes)
•
Bytes Received (cs-bytes)
•
Time Taken (time-taken)
•
User Agent (cs(User-Agent))
•
Protocol Substatus (sc-substatus)
7
To collect Outlook on the Web (OWA) logons, ensure that the following W3C Logging fields are selected:
•
Date (date).
•
Time (time):
•
User Name (cs-username):
•
Method (cs-method)
•
URI Stem (cs-uri-stem)
•
Protocol Status (sc-status)
•
User Agent (cs(User-Agent))
•
Cookie (cs(Cookie)).
•
Referer (cs(Referer))
•
Server IP Address (s-ip):
•
Server Name (s-computername):
•
Client IP Address (c-ip):
8
Click OK.
9
If you are running IIS 8.5 on Windows Server 2012 R2 or later, ensure that the Log Event Destination is set one of the following:
•
Log file only
- OR -
•
Both log file and ETW event
10
Under the Log File Rollover section, ensure that a schedule of hourly or daily is selected. UC Analytics does not support weekly, monthly, or yearly log file rollover time periods.

What ActiveSync events are collected and displayed in the insights?

If you have configured your Exchange CAS servers as described in this appendix, you can view data about different types of ActiveSync events in the insights.

To see the event type in an insight, click the details browser icon in the top right corner of the main insight. The following events are collected and displayed in the ActiveSync insights.

 
Table 37. ActiveSync event types that are collected and reported.
Event Type
Description

Sync

Synchronizes the changes in a folder between the client and the server.

SendMail

Sends mail to the server. This command is issued in the HTTP POST command's URI and does not contain an XML body. The body contains the MIME message instead.

SmartForward

Forwards a message object without retrieving the full message object from the server.

SmartReply

Replies to a message object without retrieving the full message object from the server.

GetAttachment

Retrieves an email attachment from the server.

FolderSync

Synchronizes the folder hierarchy but does not synchronize the items in the folders.

FolderCreate

Creates an email, calendar, or contacts folder on the server.

FolderDelete

Deletes a folder from the server.

FolderUpdate

Moves a folder from one location to another location on the server and is used to rename folders.

MoveItems

Moves items from one folder to another.

GetItemEstimate

Gets an estimate of the number of items in a folder that is synchronized.

MeetingResponse

Used to accept, tentatively accept, or decline a meeting request in the user's Inbox folder.

Search

Finds and retrieves information about contacts and recipients in the Global Address List (GAL).

Settings

Supports getting and setting global properties, such as Out-of-Office (OOF) and device information.

Ping

Requests that the server monitor all specified folders for changes that require the client to resynchronize.

ItemOperations

Identifies the body of a request or response as containing a set of commands operating on items.

Provision

Gets the security policy settings set by the server administrator, such as the user's minimum password length requirement.

ResolveRecipients

Resolves a list of supplied recipients and, optionally, fetches their S/MIME certificates so that clients can send encrypted messages.

ValidateCert

Validates a certificate that has been received through an S/MIME mail.

HealthCheck

Internal access from Microsoft Exchange to check the health of the ActiveSync service.

The ActiveSync data collector skips any IIS log entries for ActiveSync events that are missing critical fields. The collector writes partial information for ActiveSync events that are missing non-critical fields.

 
Table 38. Critical and non-critical fields in ActiveSync event entries.
Critical Fields
Non-Critical Fields

date

sc-bytes

time

cs-bytes

cs-uri-stem

cs-username

cs-uri-query

s-computername

sc-status

s-ip

 

time-taken

 

cs(User-Agent)

 

sc-substatus

If you see error or warnings in the data collection status for Exchange IIS Logs jobs that indicate there are missing fields, ensure that all of the recommended W3C logging fields were selected when you configured IIS logging on your Exchange CAS server.

For more information, see Configuring IIS if Exchange is hosted on Windows 2003 Server and Configuring IIS Logging if Exchange is hosted on Windows Server 2008 or later .

Appendix D:PowerShell cmdlets used by data sources

Appendix D:
PowerShell cmdlets used by data sources

This section contains information about the PowerShell cmdlets that are used by the different data sources to collect data that is used in the insights.

Exchange Configuration data source
Exchange and Exchange Online Public Folders data sources
Skype for Business/Lync Configuration data source
Exchange Online Hybrid and Native User Configuration data sources
Exchange Online Hybrid and Native Mailbox Configuration data sources
Exchange Online Mailbox Contents data source
Office 365 User Subscription Configuration data source
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating