/mcp• CDR Search for Malicious Calls - Available for CAR administrators. You can search for CDRs to get information about malicious calls. You can choose phone number or SIP URL and the date range for which to generate a report. The report displays the CDRs for all the malicious calls for a chosen phone number or SIP URL and date range. Report criteria display the phone number or SIP URL and the date range for which the report-generated information. You can view the media information and CDR-CMR dump from the CDR-CMR search results window. The media information and CDR-CMR dump information display in separate windows. • Export CDR/CMR - Available for CAR administrators. With this feature, you can export CDR/CMR dump information, for a given date range in the CSV format, to a location that you choose on your computer. You can also view the file size of the dump information and delete CDR/CMR files. CAR provides reporting capabilities for three levels of users: administrators, managers, and individual users. However, only CAR administrators can use CDR Search. Note Before You Begin Make sure that you set the Unified Communications Manager service parameters CDR Enabled Flag and Call Diagnostics Enabled to True (enabled), so the system can generate CDR/CMR data. By default, the system disables these service parameters. For more information about these service parameters, see the Configure CDR Service Parameters, on page 24. All CAR reports use CDR data. Be sure to have the most current CDR data from which to build your reports. By default, CDR data loads continuously 24 hours a day, 7 days a week. However, you can set the loading time, interval, and duration as needed. For more information, see Set Up CDR Load Schedule, on page 36. After you log in to the CAR main window, the following warning may display if Unified Communications Manager is also activated: “Warning: In some servers in this cluster the CDR Enabled Flag is false and so CDR entries may not be generated for all the calls that are made in this cluster.” Some clusters have multiple nodes where some of the nodes do not run Unified Communications Manager services. This warning checks all nodes in the cluster regardless of Unified Communications Manager service activation status. Ignore the warning after manually checking the CDR Enabled Flag parameter settings for all the Unified Communications Manager service subscribers. Note Generate CDR Search by User Only CAR administrators use the CDR Search by User/Phone Number/SIP URL feature. This section describes how to show the details of CDR data based on a user or phone number or SIP URL feature. You can search CDR data by user or directory number (calling, original called, or final called) to analyze call details for the oldest 100 records that satisfy the search criteria. If more than 100 records are returned, the system truncates the results. You can search for calls by using specific numbers for the period that you specify, which helps you trace calls that are placed from or to any specific numbers for diagnostic or informational purposes. All associated records, such as transfer, mobility, silent monitoring and recording, and conference calls, appear together as a logical group. Call Reporting and Billing Administration Guide for Cisco Unified Communications Manager, Release 15 and SUs 183 CDR Analysis and Reporting Generate CDR Search by User