Cisco CDR Reporting and Analytics




Single Splunk Server plus Separate SFTP Server

These instructions are for it you have set up Splunk with a single server, but will be using an external SFTP server.  In this case, your single Splunk server will act as Indexer (where the data gets stored), Search Head (the ‘run a search’ part of Splunk), and as the SFTP server for the CUCM data.

  1. ON YOUR SFTP SERVER, Configure the SFTP.
    • Outside of the scope for us, but here’s some pointers/tips for Windows or for Linux
  2. ON YOUR SFTP SERVER, Install and configure the universal forwarder.
  3. ON YOUR SPLUNK SERVER, Install the three Sideview apps
  4. ON YOUR SPLUNK SERVER, Install a trial license key in our app  (or full key if it’s available)
    • In the Cisco CDR Reporting and Analytics app, click Setup > Update License, paste it in and save it. (instructions)
    • If you don’t have the license key –
      • For trials – get a trial from our “Get Trial License” page.
      • For full licenses – get it from the official contact who should have it in an email
      • Or drop us a line at and we’ll figure it out.
  5. IN CUCM, add a new Billing Server entry pointing to your SFTP server.
    • See our Call Manager Configuration documentation, complete those steps and come back here.
    • If there are no empty Billing Server slots left, please contact us to discuss how to share a billing server entry with another app.  There are details to be aware of.
    • Because our inputs read the files and immediately deletes them, to confirm please stop the Splunk forwarder for a few minutes and check the folder where the files should be saved.  You should see a few show up in there.
    • Start the Splunk Forwarder again and within a few minutes the files should disappear.

Once you’ve made it through those, you should be able to start searching data.

Next steps!

  • Important – Configure your clusters. This should only take a few seconds and will ensure external numbers are parsed properly and provide location information.
  • Sites – Add IP address ranges to identify sites, see cross-site call volume, and to optionally enable mapping to work for your own infrastructure.
  • Groups – Track calls by ‘groups’ of people – ‘groups’ being whatever you’d like to define as a mapping of groups, subgroups, and names to extensions. Use it to report on your sales team, help desk or to build your own mini call center.

If you have any comments at all about the documentation, please send it in to