On random days at random intervals we have most users all the sudden turn grey and say offline. If you send them a message they will still get it though so communication is not actually down. I cannot figure out what could be causing this. Is there anyone else that has had this issue? I have looked at event viewer but found nothing. Collected logs in the tracing directory but haven't been able to figure out the issue.
08/07/2018|11:32:27.218 7A0:7A4 INFO :: End of Sending Packet - 192.168.xxx.xxx:5061 (From Local Address: 192.168.xxx.xxx:59161) 688 bytes
08/07/2018|11:32:27.218 7A0:7A4 TRACE :: CSIPCompression::CompressSendBuffer after compression, BytesLeft = 688, BytesProcessed = 688, cbDataCompressed = 237, psCompressedData = 0DB52C98
08/07/2018|11:32:27.218 7A0:7A4 TRACE :: - encrypted buffer length: 277 bytes. First 8 bytes:
08/07/2018|11:32:27.218 7A0:7A4 TRACE :: 17 03 01 01 10 48 4C CC :.....HLÌ
08/07/2018|11:32:27.218 7A0:7A4 TRACE :: CSIPTransportLayerSecurity::Send after encryption, BytesLeft = 237, BytesProcessed = 237, cbEncryptedBufSize = 277, spEncryptedBuff = 22228298
08/07/2018|11:32:27.218 7A0:7A4 TRACE :: CSIPAsyncSocket::Send this 134901D8, sending pbSendBuf 22228298, dwSendBufSize = 277
08/07/2018|11:32:27.218 7A0:7A4 TRACE :: CSIPAsyncSocket::SendHelper - [0x134901D8]
08/07/2018|11:32:27.218 7A0:7A4 TRACE :: CAsyncSocketWin32::Send this 115C55C0, pbSendBuf 22228298, dwSendBufSize = 277, dwBytesSent = 277
08/07/2018|11:32:27.218 7A0:7A4 INFO :: ~In trxn corr-id (13BBD2C0)
08/07/2018|11:32:27.218 7A0:7A4 TRACE :: verified buffer: <TLS-DSK><B41D1C0E><423><SIP Communications Service><LYNCSERVER.domain.com><28fb575cb57b4f788c003703d96f6d03><4><SUBSCRIBE><sip:employee@domain.com><93aa0598ff><sip:employee@domain.com><996D0080><><><0><200>-length-220.
signature:07085b65fa4a2f786140cbd95e01eab4f03b12aa
08/07/2018|11:32:27.218 7A0:7A4 INFO :: Trxn corr-id (223B0B00), SIP msg corr-id (82859231)
08/07/2018|11:32:27.218 7A0:7A4 INFO :: ~Out trxn corr-id (223B0B00)
08/07/2018|11:32:27.218 7A0:7A4 TRACE :: verified buffer: <TLS-DSK><C568F103><424><SIP Communications Service><LYNCSERVER.domain.com><8af7fd2781584a278a8e497a48e1de85><7><REGISTER><sip:employee@domain.com><d451867d32><sip:employee@domain.com><CBDC3CD330D4FCD736AF454105BB6A1D><><><0><200>-length-243.
signature:dee2083f8c1ed5e9ed70938ffbdc4cedffd52983
08/07/2018|11:32:27.218 7A0:7A4 INFO :: Trxn corr-id (21AD8278), SIP msg corr-id (1f4405b)
08/07/2018|11:32:27.218 7A0:7A4 INFO :: REGISTER_CONTEXT(136030a0) SetAndNotify Recv(3) at State (2)
08/07/2018|11:32:27.218 7A0:7A4 INFO :: REGISTER_CONTEXT:State (2) => (3)
08/07/2018|11:32:27.218 7A0:7A4 INFO :: SIP_REGISTER:State (3) => (0)
08/07/2018|11:32:27.218 7A0:7A4 INFO :: UCCP:NegotiatedAuthProt0x10000
08/07/2018|11:32:27.218 7A0:7A4 TRACE :: CUccServerEndpoint::UpdateEndpointState - Update state from 3 to 4. Status 0. Status text (null).
08/07/2018|11:32:27.218 7A0:7A4 INFO :: CUccDnsResolverManager::Stop MR-INFO - [11616010] DNS resolver manager stopped
08/07/2018|11:32:27.218 7A0:7A4 TRACE :: OUTGOING_REGISTER_TRANSACTION::ProcessSuccessfulResponse received 200 UnRegistration SUCCEEDED
08/07/2018|11:32:27.218 7A0:7A4 INFO :: ~Out trxn corr-id (21AD8278)
08/07/2018|11:32:27.218 7A0:7A4 INFO :: CUccPlatform::WriteStreamToLog:
08/07/2018|11:32:27.218 7A0:7A4 INFO :: <?xml version="1.0" encoding="UTF-8"?>
<root>
<Login>
<ExecutionDuration>0</ExecutionDuration>
<SequenceID>1.1</SequenceID>
<hr>0x0</hr>
</Login>
</root>
08/07/2018|11:32:27.359 7A0:7A4 TRACE :: MULTIPARTY_SESSION::RemoveFromLinkedList[137D6B88] removed from linked list
08/07/2018|11:32:27.374 7A0:7A4 INFO :: CSIPAsyncSocket::Disconnect Shuttingdown 115C55C0
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPTransportLayerSecurity::Shutdown - [0x113BD688]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x1139CC20]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPMessageCollator::~CSIPMessageCollator - [0x13473CA0]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x13473CA0]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x115952C0]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x115952B8]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x113BD690]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x113BD688]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x134901E0]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x134901D8]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: SSIPTransportContext::~SSIPTransportContext - [0x11608790]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPTransportLayerNotify::~CSIPTransportLayerNotify - [0x11608760]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: CSIPTransportLayer::~CSIPTransportLayer - [0x11608758]
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: MULTIPARTY_SESSION::RemoveFromLinkedList[21B8D0C8] removed from linked list
08/07/2018|11:32:27.374 7A0:7A4 INFO :: SIP_REGISTER::Unregistration already in unregister/ed state (0), this [136243D8]
08/07/2018|11:32:27.374 7A0:7A4 INFO :: SIP_STACK::DeleteSipEndpoint deleting sip endpoint 13623DA0, this 115F6008
08/07/2018|11:32:27.374 7A0:7A4 INFO :: SIP_ENDPOINT::Shutdown (13623da0) Shutdown
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: SA(ffccea8) ReInit
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: SA(ffccea8) state change(4)=(0)
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: SA(ffccea8) ReInit
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: SA(ffccea8) ReInit
08/07/2018|11:32:27.374 7A0:7A4 TRACE :: SA(ffccea8) ReInit
08/07/2018|11:32:27.374 7A0:7A4 INFO :: this(136243FC) - SA(0FFCCEA8) Removed
08/07/2018|11:32:27.374 7A0:7A4 INFO :: SIP_AUTH(136243fc) SetState (2) => (0)
08/07/2018|11:32:27.374 7A0:7A4 INFO :: CUccDnsResolverManager::Stop MR-INFO - [11616010] DNS resolver manager stopped
08/07/2018|11:32:28.735 7A0:7A4 TRACE :: CUccMediaManagerEventAdapter::~CUccMediaManagerEventAdapter - CUccMediaManagerEventAdapter destructor called