Solved

Need to find which user or IP phone has dialed a certain string.

Posted on 2014-01-24
4
313 Views
Last Modified: 2014-02-07
I'm using a Cisco CallManager 6.1xxx. I have a user that continues to forward calls to another business. At least that is what it appears like. Our source phone provider (comcast) is stating that the forward is happening from the phone itself with a *72 xxx-xxx-xxxx combination. Is there a way i can use the Real time monitoring tool to scour the logs for the # dialed, and find out which of my extensions (Directory #'s) is dialing this pattern? WOULD BE A HUGE HELP, Thank you
0
Comment
Question by:Mcottuli
  • 2
  • 2
4 Comments
 
LVL 20

Accepted Solution

by:
José Méndez earned 500 total points
ID: 39808195
If you know the number dialed with precision, configure the traces as indicated here:

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a0080094e89.shtml

Then use the RTMT to build a query looking for this text string:

dd="*72112233445566

Replace the portion after the double quotes with your called number, and run the query on all nodes. These should return who is calling that number. If you don't get results, try with an extension you know for sure you have dialed after setting up the traces, using the same syntax and the query should bring you back some results:

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/service/5_0_1/ccmsrva/sartmttc.html#wp1099088

The query will return the files where the string was found, and near the line where it appears, you will see the calling number.
0
 
LVL 1

Author Comment

by:Mcottuli
ID: 39808549
Thank you. I will test.
0
 
LVL 1

Author Comment

by:Mcottuli
ID: 39808791
Not having much luck. As you said I've tested a number that I know has been dialed.
I'm opening the RTMT, going to Trace and Log Central, clicking Query Wizard. Not sure which service to select so I select "Select all services on all Servers" under CCM,CUC, and System. The for my query I'm typing dd="18008881111 (Representing 1-800-888-1111) that I dialed about an hour ago. After the query finished I went through ALL the different files, they were all empty accept the "Cisco Trace Collection Service" which contained what I believe is just my previous searches. I also searched dd="918008881111 because we have to dial 9 before calling out, not sure if that was needed? Any thoughts on what IU might be missing, all traces are turned on and enabled in unified serviceability.
0
 
LVL 20

Expert Comment

by:José Méndez
ID: 39810781
Your traces may be getting overwritten. The only service you have to check is the Cisco Callmanager check box for all servers in the cluster. This is how the search looks like:

query
The other option would be an SQL query like the one in the output below, from a SSH connection to the Publisher server, if  and only if you have the CDR feature enabled on each node:


admin:run sql car select callingpartynumber  from car:tbl_billing_data where finalcalledpartynumber='8965'
callingpartynumber
==================
1102

Open in new window


As you see, this returns the calling party when 8965 is dialed, you would have to modify the query a bit though.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

Have you experienced traffic destined through a Cisco ASA firewall disappears and you do not know if the traffic stops in the firewall or somewhere else? The solution is the capture feature. This feature was released in 6.2(1) and works in all firew…
I recently purchased a Bluetooth headset called the Music Jogger (model BSH10). The control buttons on it look like this: One of my goals is to use it as the microphone and speakers for Skype calls. In that respect, it works well. However, I …
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now