/mcpGenerate CDR Search for Malicious Calls Only CAR administrators use the CDR Search for Malicious Calls feature. This section describes how to search for malicious calls. Procedure Step 1 Choose CDR > Search > Malicious Calls. The CDR Search for Malicious Calls window displays. Step 2 Perform one of the following tasks: a) In the Select Phone Number/SIP URL(s) box, enter the phone number or SIP URL in the Phone Number/SIP URL field and click Add Phone Number/SIP URL. The phone number or SIP URL of the user displays in the Selected Phone Number/SIP URL(s) box. b) To search for a user phone number or SIP URL, click the Search Internal Phone Number/SIP URL based User link, enter the first few letters of the first and/or last name in the First Name and/or Last Name fields, and click the Search button. When the results display, click the Select link next to the result that you want to include. The phone number or SIP URL of the user displays in the Selected Phone Number/SIP URLs box. Click Close. Note To remove the phone number or SIP URL, highlight the phone number or SIP URL that you want to remove and click Remove Phone Number/SIP URL(s). To remove all phone numbers or SIP URL(s), click Remove All Phone Number/SIP URL(s). Step 3 Choose the date and time range of the period when you want to search for CDR data. The current time displays in both Coordinated Universal Time (UTC) and local time and uses the following rules: a) The UTC and local time comprise a numeric string of mmddyyyy hhmmss, as in January 15, 2007 12:00:00. b) The default FromDate and ToDate values display in UTC time. c) The default ToDate specifies the current time of the server in UTC time. d) The default FromDate value specifies the ToDate value minus 1hour. For example, if ToDate = January 15, 2007 12:00:00, then the FromDate default value = January 15, 2007 11:00:00 (all times in UTC). Step 4 Choose whether to run the CDR Search report With Grouping or Without Grouping. If you chose with grouping, check the box beside With Grouping. The default value specifies Without Grouping Note With Grouping means that the system returns CDR records that match the date and time range for the search and groups them with their associated records. Without Grouping returns all the CDR records that match the date and time range without grouping all the associated records for each call together. Step 5 Click OK. The CDR-CMR Search Results window displays. The system only displays the oldest 100 records that fall into the date and time ranges that you configured in Step 3, on page 194. If more than 100 records are returned, the system truncates the results. Step 6 To view the CMR data, click Others. To view both the CDR and CMR data fields, click View. Call Reporting and Billing Administration Guide for Cisco Unified Communications Manager, Release 15 and SUs 194 CDR Analysis and Reporting Generate CDR Search for Malicious Calls