cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
1342
Views
0
Helpful
4
Replies
afaudale
Beginner

Review deleted call history

We have a situation where a user is claiming they did not make a specific outbound call. The users phone does not show the call record. However, CDR shows that the call was made. Is there a way to see if the user manually deleted the call record history from their phone?

 

7841 model SIP phone

CUCM Version 11.5.1

 

Thanks in advance for the help!

1 ACCEPTED SOLUTION

Accepted Solutions
afaudale
Beginner

FYI - after working with Cisco TAC and doing some internal testing on our side, we discovered the actual event in the logs will look something like the following:

 

  • These 2 hard key event reads will come always together after the “Are you sure you want to delete?” question and the “Delete” softkey is pressed.
  • In case the “Clear” softkey was used, we will see exactly the same events:  

 

1789 NOT Jul 15 13:41:55.809643 (579:1108) JAVA-NIOGetEvent: hard key event read

1790 NOT Jul 15 13:41:55.809796 (579:1108) JAVA-CreateKeyEvent type is 5, value is 2 and action is 2   ---------à  Selects Delete

1791 INF Jul 15 13:41:55.810529 (579:1108) JAVA-NativeUserInput|cip.userio.InputManager:? - Received SOFT: 2

1792 NOT Jul 15 13:41:55.810956 (579:1108) JAVA- -NIO| read Failed Hard Keyboard(Resource temporarily unavailable). Read -1 bytes.

1793 NOT Jul 15 13:41:55.955317 (579:1108) JAVA-NIOGetEvent: hard key event read

1794 NOT Jul 15 13:41:55.955470 (579:1108) JAVA-CreateKeyEvent type is 5, value is 2 and action is 1------- à

1795 INF Jul 15 13:41:55.956202 (579:1108) JAVA-NativeUserInput|cip.userio.InputManager:? - Received SOFT: 2

View solution in original post

4 REPLIES 4
jonathan.salter
Participant

Should be able to see it in the phone logs....I believe this is the line...

 

0121 ERR Jul 10 14:33:06.118527 (18784:18930) JAVA-callui MQThread|cip.callui.DialCallHistoryList:? - ===!!! notify replace_list

Please remember to rate useful posts, click on the stars below.

Hi Jonathan,

 

Thank you for the information. Should I search using "replace_list" or "0121 ERR"? 

 

Thanks in advance for your help!

Hi Jonathan,

 

I searched based off of various keywords in your suggested output but was unable to see a similar output. I also checked on a phone that I recently deleted a call call log from and was unable to see anything similar as well. Could it be that our system isn't configured to see when a user deletes a call log or clears it completely?

 

Thanks again for the help!

afaudale
Beginner

FYI - after working with Cisco TAC and doing some internal testing on our side, we discovered the actual event in the logs will look something like the following:

 

  • These 2 hard key event reads will come always together after the “Are you sure you want to delete?” question and the “Delete” softkey is pressed.
  • In case the “Clear” softkey was used, we will see exactly the same events:  

 

1789 NOT Jul 15 13:41:55.809643 (579:1108) JAVA-NIOGetEvent: hard key event read

1790 NOT Jul 15 13:41:55.809796 (579:1108) JAVA-CreateKeyEvent type is 5, value is 2 and action is 2   ---------à  Selects Delete

1791 INF Jul 15 13:41:55.810529 (579:1108) JAVA-NativeUserInput|cip.userio.InputManager:? - Received SOFT: 2

1792 NOT Jul 15 13:41:55.810956 (579:1108) JAVA- -NIO| read Failed Hard Keyboard(Resource temporarily unavailable). Read -1 bytes.

1793 NOT Jul 15 13:41:55.955317 (579:1108) JAVA-NIOGetEvent: hard key event read

1794 NOT Jul 15 13:41:55.955470 (579:1108) JAVA-CreateKeyEvent type is 5, value is 2 and action is 1------- à

1795 INF Jul 15 13:41:55.956202 (579:1108) JAVA-NativeUserInput|cip.userio.InputManager:? - Received SOFT: 2

View solution in original post

Create
Recognize Your Peers
Content for Community-Ad