cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
160
Views
0
Helpful
4
Replies
Beginner

Review deleted call history

We have a situation where a user is claiming they did not make a specific outbound call. The users phone does not show the call record. However, CDR shows that the call was made. Is there a way to see if the user manually deleted the call record history from their phone?

 

7841 model SIP phone

CUCM Version 11.5.1

 

Thanks in advance for the help!

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
Beginner

Re: Review deleted call history

FYI - after working with Cisco TAC and doing some internal testing on our side, we discovered the actual event in the logs will look something like the following:

 

  • These 2 hard key event reads will come always together after the “Are you sure you want to delete?” question and the “Delete” softkey is pressed.
  • In case the “Clear” softkey was used, we will see exactly the same events:  

 

1789 NOT Jul 15 13:41:55.809643 (579:1108) JAVA-NIOGetEvent: hard key event read

1790 NOT Jul 15 13:41:55.809796 (579:1108) JAVA-CreateKeyEvent type is 5, value is 2 and action is 2   ---------à  Selects Delete

1791 INF Jul 15 13:41:55.810529 (579:1108) JAVA-NativeUserInput|cip.userio.InputManager:? - Received SOFT: 2

1792 NOT Jul 15 13:41:55.810956 (579:1108) JAVA- -NIO| read Failed Hard Keyboard(Resource temporarily unavailable). Read -1 bytes.

1793 NOT Jul 15 13:41:55.955317 (579:1108) JAVA-NIOGetEvent: hard key event read

1794 NOT Jul 15 13:41:55.955470 (579:1108) JAVA-CreateKeyEvent type is 5, value is 2 and action is 1------- à

1795 INF Jul 15 13:41:55.956202 (579:1108) JAVA-NativeUserInput|cip.userio.InputManager:? - Received SOFT: 2

4 REPLIES 4
Participant

Re: Review deleted call history

Should be able to see it in the phone logs....I believe this is the line...

 

0121 ERR Jul 10 14:33:06.118527 (18784:18930) JAVA-callui MQThread|cip.callui.DialCallHistoryList:? - ===!!! notify replace_list

Please remember to rate useful posts, click on the stars below.
Highlighted
Beginner

Re: Review deleted call history

Hi Jonathan,

 

Thank you for the information. Should I search using "replace_list" or "0121 ERR"? 

 

Thanks in advance for your help!

Beginner

Re: Review deleted call history

Hi Jonathan,

 

I searched based off of various keywords in your suggested output but was unable to see a similar output. I also checked on a phone that I recently deleted a call call log from and was unable to see anything similar as well. Could it be that our system isn't configured to see when a user deletes a call log or clears it completely?

 

Thanks again for the help!

Beginner

Re: Review deleted call history

FYI - after working with Cisco TAC and doing some internal testing on our side, we discovered the actual event in the logs will look something like the following:

 

  • These 2 hard key event reads will come always together after the “Are you sure you want to delete?” question and the “Delete” softkey is pressed.
  • In case the “Clear” softkey was used, we will see exactly the same events:  

 

1789 NOT Jul 15 13:41:55.809643 (579:1108) JAVA-NIOGetEvent: hard key event read

1790 NOT Jul 15 13:41:55.809796 (579:1108) JAVA-CreateKeyEvent type is 5, value is 2 and action is 2   ---------à  Selects Delete

1791 INF Jul 15 13:41:55.810529 (579:1108) JAVA-NativeUserInput|cip.userio.InputManager:? - Received SOFT: 2

1792 NOT Jul 15 13:41:55.810956 (579:1108) JAVA- -NIO| read Failed Hard Keyboard(Resource temporarily unavailable). Read -1 bytes.

1793 NOT Jul 15 13:41:55.955317 (579:1108) JAVA-NIOGetEvent: hard key event read

1794 NOT Jul 15 13:41:55.955470 (579:1108) JAVA-CreateKeyEvent type is 5, value is 2 and action is 1------- à

1795 INF Jul 15 13:41:55.956202 (579:1108) JAVA-NativeUserInput|cip.userio.InputManager:? - Received SOFT: 2

CreatePlease to create content
Content for Community-Ad
August's Community Spotlight Awards