Review deleted call history

[afaudale]

We have a situation where a user is claiming they did not make a specific outbound call. The users phone does not show the call record. However, CDR shows that the call was made. Is there a way to see if the user manually deleted the call record history from their phone?

7841 model SIP phone

CUCM Version 11.5.1

Thanks in advance for the help!

[jonathan.salter]

Should be able to see it in the phone logs....I believe this is the line...

0121 ERR Jul 10 14:33:06.118527 (18784:18930) JAVA-callui MQThread|cip.callui.DialCallHistoryList:? - ===!!! notify replace_list

[afaudale]

Hi Jonathan,

Thank you for the information. Should I search using "replace_list" or "0121 ERR"? 

Thanks in advance for your help!

[afaudale]

Hi Jonathan,

I searched based off of various keywords in your suggested output but was unable to see a similar output. I also checked on a phone that I recently deleted a call call log from and was unable to see anything similar as well. Could it be that our system isn't configured to see when a user deletes a call log or clears it completely?

Thanks again for the help!

[afaudale · Accepted solution]

FYI - after working with Cisco TAC and doing some internal testing on our side, we discovered the actual event in the logs will look something like the following:

• These 2 hard key event reads will come always together after the “Are you sure you want to delete?” question and the “Delete” softkey is pressed.
• In case the “Clear” softkey was used, we will see exactly the same events:  

1789 NOT Jul 15 13:41:55.809643 (579:1108) JAVA-NIOGetEvent: hard key event read

1790 NOT Jul 15 13:41:55.809796 (579:1108) JAVA-CreateKeyEvent type is 5, value is 2 and action is 2   ---------à  Selects Delete

1791 INF Jul 15 13:41:55.810529 (579:1108) JAVA-NativeUserInput|cip.userio.InputManager:? - Received SOFT: 2

1792 NOT Jul 15 13:41:55.810956 (579:1108) JAVA- -NIO| read Failed Hard Keyboard(Resource temporarily unavailable). Read -1 bytes.

1793 NOT Jul 15 13:41:55.955317 (579:1108) JAVA-NIOGetEvent: hard key event read

1794 NOT Jul 15 13:41:55.955470 (579:1108) JAVA-CreateKeyEvent type is 5, value is 2 and action is 1------- à

1795 INF Jul 15 13:41:55.956202 (579:1108) JAVA-NativeUserInput|cip.userio.InputManager:? - Received SOFT: 2