Endpoint Demotion Syslog Message
A Syslog message can be generated when an endpoint is demoted. Setting the media manager config -> syslog-on-demote-to-deny parameter to enabled writes and endpoint demotion warning to the syslog every time an endpoint is demoted to the denied queue. By default, this configuration option is set to disabled. The syslog message has a WARNING Level and looks like this:
Jan 15 12:22:48 172.30.60.12 ACMESYSTEM sipd[1c6e0b90] WARNING SigAddr[access:168.192.24.40:0=low:DENY] ttl=3632 guard=798 exp=30 Demoted to Black-List (Too many admission control failures)