Blogs

 

Archives


March 16, 2021
Cisco CDR Reporting and Analytics, 6.0 – new features!

I’ll make it short and let you be dazzled by the new features, not by my carefully considered rhetoric. (As with all the images on this site, click them to get a larger version!) While there were many improvements all around, this blog will focus on New Search Filtering the new Browse Groups page improvements…  continue reading…

November 9, 2020
Mapping Sites

We have a blog on putting calls on a map, but what do you do if you want to map internal calls? Easy! The process is Set up sites Find some data, Add a few magic commands Listen to the applause from your teammates and boss! Set up Sites I won’t belabor the parts of…  continue reading…

September 22, 2020
Quick Wins, #2 – Creating Dashboards

In our last installment (Quick Wins #1 – High Value information) , we showed a variety of simple to run, high impact reports. Today, let’s put some of them on a dashboard. This process has several steps.  We are going to Put a graph on a brand new dashboard, creating the dashboard in the process….  continue reading…

September 14, 2020
Quick Wins, #1 – High Value Information

Sometimes all you need are the basics. Are we having problems with failed calls?  Are the gateways provisioned well?  Are we missing a lot of calls? That’s exactly what we’ll show you today.  And stay tuned, because the next installment will use these as examples for building a dashboard for management. General Gateway Utilization Gateway…  continue reading…

June 19, 2020
Migrations, and moving our app to a new system

We get asked fairly regularly about moving our app from one server to another. The answer to this question is very dependent on your environment. In the below we talk about a migration strategy for a single standalone Splunk server with our apps on it, that’s acting as your SFTP server for your CUCM implementation,…  continue reading…

May 8, 2020
Lookin’ for troublesome Jabber calls

When it comes to Jabber, softphone and other calls that are being placed from people’s homes instead of from in your building, the old tried and true method of slicing and dicing by gateways isn’t as useful as it is with the more deterministic quality of desk phones in an internal network. Finding Jabber calls…  continue reading…

April 22, 2020
Lookin’ for trouble

Sometimes you just need to find your problem spots.  The most common request is for “failed calls”. We have a lot of ways to find failed calls, but let’s start with some easy ones first!  Most of these examples can be looked at in 15 seconds or less. Failed Calls – by Gateways Click Browse…  continue reading…

April 2, 2020
Work From Home, part 6 – Jabber and Softphone Usage the EASY way

You know, sometimes I can be silly. There’s a great blog from last week on Jabber and Softphone usage, but because I was so busy and focused on making those blogs all be “similar to one another” to make it easier to follow along with each, I completely failed to just tell you the *easy*…  continue reading…

March 27, 2020
Work From Home, part 5 – Accurate names

With the current emphasis on working from home and all the changes that incurs, maybe one of these questions is now suddenly more important to you than it used to be! Today’s topic How can I see the names for mobile calls from our employees? Other pages this week: Is mobility working right, are people…  continue reading…

March 26, 2020
Work From Home, part 4 – Gateways that are less utilized now

With the current emphasis on working from home and all the changes that incurs, maybe one of these questions is now suddenly more important to you than it used to be! Today’s topic What gateways do I have that are now far *under* capacity? Other pages this week: Is mobility working right, are people receiving…  continue reading…

March 25, 2020
Work From Home, part 3 – Gateways that are reaching capacity

With the current emphasis on working from home and all the changes that incurs, maybe one of these questions is now suddenly more important to you than it used to be! Today’s topic What gateways do I have that are reaching capacity? Other pages this week: Is mobility working right, are people receiving phone calls?…  continue reading…

March 24, 2020
Work From Home, part 2 – Jabber and Softphone Usage

With the current emphasis on working from home and all the changes that incurs, maybe one of these questions is now suddenly more important to you than it used to be! Today’s topic How many folks are using Jabber or softphones? Other pages this week: Is mobility working right, are people receiving phone calls? What…  continue reading…

March 23, 2020
Work From Home, part 1 – Finding mobility calls

With the current emphasis on working from home and all the changes that incurs, maybe one of these questions is now suddenly more important to you than it used to be! Today’s topic Is mobility working right, are people receiving phone calls? Other pages this week: How many folks are using Jabber or softphones? What…  continue reading…

December 20, 2019
Alerting

Building a custom alert We get occasional questions involving alerting. While we have a built-in 911 alert, we don’t build in any others. This is of course because no two needs are close enough that one alert would work for both except maybe in that “Someone made a call to emergency services” scenario. But as…  continue reading…

October 10, 2019
Come see Nick talk at conf19 – “Master joining without using join”

If you’re coming to the Splunk user conference in Vegas, aka conf19, come see my talk – “Master Joining Your Datasets Without Using Join”! It’s on Thursday 10/24 10:30am. If you use Splunk and you have any searches or reports that use the join, append, or transaction commands this is a talk for you. Likewise…  continue reading…

October 9, 2019
Splunk conf2019, come and find us!

I hope you are coming!  Nick and I will both be there in various capacities. Nick is giving a talk – it’s a new and improved version of his long-standing  talk on building performant searches by using the stats command instead of join or other less efficient commands. I will be helping out at the…  continue reading…

September 12, 2019
Building custom fields

Let me lay out a simple scenario: At our fictional business “Hattie’s Hats”, Getrude believes that Esther is artificially inflating her outbound statistics by calling people and just hanging up instead of actually selling them hats. Of course, this is test data so from what I can see of it, a quick in-my-mind average says…  continue reading…

September 9, 2019
UCCX, the beginnings

We occasionally get requests to incorporate UCCX information into the Cisco CDR Reporting and Analytics app.  That turns out to be a rather large undertaking! Just because it is unlikely to get incorporated into our flagship product any time in the near future doesn’t mean that you can’t ingest that data and take a look…  continue reading…

September 5, 2019
Splunk development adventures in Splunk 8.0 with Python3 on.

Splunk Enterprise 8.0 is coming! And it has Python3! Disclaimer: If you have never written any Python in Splunk and don’t plan on it, this is probably not the blog post for you. Still there? OK the short version is that Splunk Enterprise 8 ships both Python2 and Python3. The core python pieces inside Splunk…  continue reading…

July 12, 2019
New Concurrency Calculations!

It’s the moment you’ve ALL been waiting for! We often get asked if the gateway concurrency page could be modified to do other similar things.  In thinking through doing that, we realized that most of the extra use cases could be handled much better if there were a “concurrency” field you could use in General…  continue reading…

May 28, 2019
Weekdays, weekends, and reporting over disjointed timeframes

We’ve had a few questions recently about how to report on disjointed, separate time frames. For instance, How do I report on only after-hours calls?  Or maybe I want to report on calls between 8 AM and 5 PM, Monday through Friday, and also 9 AM to Noon on Saturday. Let’s start with that first…  continue reading…

May 15, 2019
Shoretel Extensions and Groups

As of Shoretel 2.2, we’ve added in some amazing new functionality. What’s new? The biggest change is that we’ve built in a page to summarize extensions.  You can define groups and subgroups, then on an easy to use page report on the number and length of calls (in various directions).  Here’s an example! Use cases…  continue reading…

March 15, 2019
Custom Maps – 3, Converting Your Map Into a Choropleth Map

Imagine plotting your printer error count directly on a floorplan, or dropping count of failed backups on a campus map so you know which locations are having problems! If you were to search for “Splunk custom map”, you might find as I have that the only customizations they talk about involve just putting *your* data…  continue reading…

Custom Maps – 2, Using Your Map Inside Splunk

Imagine plotting your printer error count directly on a floorplan, or dropping count of failed backups on a campus map so you know which locations are having problems! If you were to search for “Splunk custom map”, you might find as I have that the only customizations they talk about involve just putting *your* data…  continue reading…

March 14, 2019
Custom Maps – 1, Create a Tileset

Imagine plotting your printer error count directly on a floorplan, or dropping count of failed backups on a campus map so you know which locations are having problems! If you were to search for “Splunk custom map”, you might find as I have that the only customizations they talk about involve just putting *your* data…  continue reading…

March 1, 2019
New Cisco quality scores

Just when you were getting a handle on knowing what MOS (mean opinion score) or it’s cousin MLQK (MOS Listening Quality K-factor – the last 8 seconds MOS) means and how they’re useful, Cisco is phasing them out. But first and important (and short) note: Please update to version 5.10 to get all the goodies…  continue reading…

February 12, 2019
Shoretel 2.0

For all you with Shoretel phone systems, we’ve got news for you!  Shoretel 2.0. What new features does this bring to the table? New Browse Calls Browsing calls was never so easy – you can now have any fields you’d like on the screen.  If you are investigating calls that disconnected for unusual reasons, need…  continue reading…

December 14, 2018
Simple Search Filters

Sometimes the problems we need to solve aren’t hard ones. Rich, Shawn from marketing says that yesterday afternoon he made a lot of calls from his extension 4128, but no one ever picked up. I say he’s just lazy and didn’t make any calls. Can you tell us which one of us is right? Thanks,…  continue reading…

November 20, 2018
Advanced search filters

As we allude to in several other places (notably, in 4.4 interface changes and in performance notes), there’s a whole world of searching that our app provides beyond what’s apparent in the interface. What are we talking about? This field, right here. It’s a pretty awesome field and lets you do pretty much any sort…  continue reading…

October 19, 2018
Creating new device types

The setup We provide a reasonable coverage of device types, but we can’t know them all.  Did you know that you can edit existing names or add new ones? Let’s jump right into an example of creating a new device type. First Step – Find your devices Suppose you have a situation where there are…  continue reading…

October 12, 2018
Hunt pilots, groups, and browsing extensions – Making your own call center!

Oh no, you’ve just been given control of the IT group.  You are trying to build your own miniature call center with hunt groups, but you have no way to accurately report on it.  Who’s taking calls?  Who’s not?  How much time are your agents spending on the phone?  How would you ever reward your…  continue reading…

October 5, 2018
Performance notes

Performance is a very big topic.  We try here to break down a few app-specific items on the browse calls page to help make sure your searches don’t take any longer than necessary. The tools we show you how to use should let you perform your own analysis on other screens in the Cisco CDR…  continue reading…

September 28, 2018
Field Gallery – or, “What does this field even mean?”

Have you ever wondered what all those “other” fields mean in your CDR data?  What exactly is a “OutgoingProtocolID” and why should I care? Or the call center people keep telling me that 1 in 4 calls end up being garbled and low quality.  How do I find out what to even look for? Your…  continue reading…

September 24, 2018
4.4 interface changes

New in 4.4 we have rearranged a few key pieces of the Browse Calls interface. Overall, the flow through these fields wasn’t as good as it could have been.  In our extensive customer testing (e.g. “we pay attention on Webexes with customers”) we realized that nearly everyone used the fields in an order that didn’t…  continue reading…

August 31, 2018
Health checks for the Cisco CDR Reporting and Analytics app

Did you know that the Cisco CDR Reporting and Analytics app has a series of health checks built right into it? These check for several of the most common configuration issues we’ve seen, like CDR data going into the wrong index CDR data not timestamped or extracted properly Lookups that are missing or broken And…  continue reading…

August 15, 2018
Using Leg Types to make your life easier

First, a quick chat about call legs vs. calls.   We all know what a call is – that period of time from when you pick up a phone until you put it back down again.  In modern systems each call  is comprised of one or more call legs, with each leg being a single source/destination…  continue reading…

August 10, 2018
Choropleth Maps!

If you read our last installment on Maps, you’ll know we can put calls on a map. There are even more cool maps to display calls on!  In addition to Cluster maps, Splunk also has bundled with it Choropleth maps for both Countries and for US States. A refresher Before starting, you may want to…  continue reading…

June 15, 2018
Maps!

The question Have you ever wondered where your inbound calls come from?  Do you suspect agents are placing a lot of calls on the company dime to Loja, Ecuador to find out if the high temp there is supposed to be 74F again today? Well, you are in luck!  Today we’ll show you how to…  continue reading…

June 14, 2018
Enabling CUBE or vCUBE data

Cisco Contact Center gives you great visibility for Contact Center, and products like ours give you great visibility into CallManager… …but have you noticed there’s a CUBE-sized blind spot in your picture of overall call flow? Lucky for you, we can make sense of this data now. All the H.323 and SIP traffic, media streams…  continue reading…

April 10, 2018
Welcome Rich Mahlerwein!

I am extremely excited to announce that Rich Mahlerwein has joined Sideview as of yesterday morning! Rich is a Splunker extraordinaire, an expert on technologies all across the datacenter, a fantastically helpful member of the Splunk community and even a Splunk Trust member. In fact he’s so unique that Splunk literally sent someone out to…  continue reading…

August 4, 2017
How to build everything backwards

Our minds, for better or worse, are wired a certain way. We hear someone’s problem and we immediately want to solve it, even before they’re done describing it. This doesn’t even sound like a bad thing does it? A story. The first version of a Thing is built. It’s purpose is to take a process…  continue reading…

January 27, 2017
Postprocess searches – pitfalls galore

As you develop a custom view you start with one chart or one table. After a while you’ve added and added, and you’re dispatching several searches. Often you’ll see that a lot of searches are pretty similar to each other. You’re getting the same events off disk more than once and you’re making Splunk do…  continue reading…

June 24, 2016
There’s always a worse way

In the Splunk search language there is almost always a better way, and someone on answers.splunk.com to teach you about it. Less commonly advertised though, is the fact that there is ALWAYS a worse way… So let’s drive the wrong way down a one way street. Bear with me. First, a warning. Driving the wrong…  continue reading…

January 25, 2016
New Sideview Utils module – NavBar

The latest release of Sideview Utils (3.3.9) includes a new module called NavBar that can be used to replace Splunk’s AppBar module. Now why do I need to replace AppBar?. Well, you very well might not! It has to do with the “displayview” setting in savedsearches.conf. If you’re a Splunk app developer who’s been around…  continue reading…

December 11, 2015
Field pickers for everyone!

By popular demand, you can now pick the columns and fields in Browse Calls and also in the “raw call legs” table inside Call Detail. So when you’re looking into something around say call quality fields, with just couple clicks you can make Browse Calls show you everything about those fields instead. And then the…  continue reading…

November 2, 2015
some words from the HTML module

Since I’ve been negligent in posting any news, I thought I’d let the HTML module take the wheel for a few minutes. What it has chosen to share are the donut-related comments above a few of its defined methods, written in 2010 when Sideview was just a few months old. /** * clients call this…  continue reading…

April 10, 2015
Shotgun Reporting app released

Earlier this year I wrote up an app called “Shotgun Reporting” as an entry for the Splunk Apptitude contest. Here’s its page on the contest site. I like to think it had a shot at winning but it didn’t. In any event it was a fun and pretty intense week prototyping and building it. In…  continue reading…

April 16, 2014
New Testimonials page for the Splunk for Cisco CDR app

We just put a couple testimonials for our CallManager solution, Splunk for Cisco CDR.   Check them out if you get a chance.  

April 2, 2014
New screen capture demo of Splunk for Cisco CDR

If you use Cisco CallManager, you will want to check out this 10 minute demo and overview of our reporting solution for CallManager – “Splunk for Cisco CDR”.   And afterwards don’t forget that you can set up a trial version on your own live data in about 15 minutes.  Download the trial, check out…  continue reading…

November 26, 2013
Sideview Utils 2.7.1 released this morning.

I’m not sure why I haven’t been posting release notes as “news” items on the site. Going forward I think I’m going to post the release notes emails here. Without further ado: 2.7.1 (November 26th, 2013) > Fixed a bug in the Filters module where certain back-button and forward-button scenarios would lead to inconsistent UI…  continue reading…

October 7, 2013
New Licensing FAQ

It’s better late than never – there is now a Sideview Utils Licensing FAQ. If you’ve ever thought about Sideview Utils and licensing, take a look.   It’s not uncommon for people to have slightly off ideas about the licensing and how it applies to them.  This faq really should clear it up.   And…  continue reading…

May 24, 2013
New mailing list for Sideview Utils

1) There is finally a mailing list for Sideview Utils updates.  It’s been something people have been asking for for a long time, and it’s finally here. So if you’ve been having trouble staying up with all the latest fixes, features, and documentation,  sign up now.  Sideview Utils gets updated every couple weeks on average,…  continue reading…

February 15, 2013
New Cooking with Sideview episodes

I did two videos last December and they’re really the best ones so far so check them out. In the first, which is the fourth overall, I take a step back and give a broad overview of Sideview Utils. What it is, what it does, why it’s awesome and why you should use it. —…  continue reading…

October 30, 2012
Fire drill around Splunk 5.0

We just updated all of our apps!  Why, you ask? Well, Splunk 5.0 was released this morning, and despite having tested everything against earlier 5.0 builds,   when the GA version of Splunk 5.0 released this morning, we had a little problem! As you (the Sideview user) know,  Sideview Utils and Sideview apps in general…  continue reading…

October 6, 2012
Sideview Utils 2.2 – even more awesome

This was a big release.   The Table and Multiplexer modules introduce a new Sideview mechanism that allows you to greatly expand the range of custom rendering.    I’ll be expanding on this as soon as I can, in the form of a new “Cooking with Sideview” video, so keep an eye out for that….  continue reading…

August 8, 2012
Sideview Utils 2.1 released

  A bunch of great stuff just came out in Sideview Utils 2.1 “Runtime Debug” mode in the Sideview Editor.   For the first time Splunk admins have a way to debug tricky form searches and inline drilldowns.   Are the $foo$ tokens not ending up quite where they’re supposed to?  Walk the module hierarchy…  continue reading…

August 1, 2012
So you’d like to… convert a simplified XML dashboard to Sideview Utils

Intro: There are two flavors of simple XML,  the <dashboard> and the <form>.   With both flavors, in terms of interface functionality they are both just limited shorthand forms of the “advanced XML”, which I just mention to reassure you that the conversion process is relatively reliable and you won’t necessarily lose anything.   And once…  continue reading…

July 25, 2012
Sideview Utils 2.0, now free for internal use!

There’s been another turn in the road around the Sideview Utils licensing.   Full details are in the license agreement, but in short Sideview Utils 2.0 is now available free of charge for internal use only.   (woot!) To illustrate: So if you want to use Sideview Utils for some dashboards that you use internally,…  continue reading…

May 22, 2012
screencasts are addictive, aka Cooking With Sideview, episode 3

I’m getting the hang of these screencasts, and I just launched one for the Sideview Editor.   Check it out .  You may have seen the screenshot of the Editor on the Sideview Utils page,  but let me give you a tour of it in person.   In the video I introduce the editor,  I first…  continue reading…

May 18, 2012
Cooking with Sideview, episode 2 – docs that live and breathe

Check out the latest screencast.  Here we go and look at the living breathing examples that are embedded in the Sideview Utils documentation.    We walk you through how to read the docs, play with the living examples, and understand the XML source all at the same time. Along the way you’ll also get a quick…  continue reading…

May 17, 2012
Cooking with Sideview, episode 1 – the Sideview report builder

This marks the first of many little screencasts showing some awesome things that are either contained in Sideview Utils 2.0, or that have been built using it. This particular episode is about the Sideview Report Builder, which like many things just came out in the new version. So what is the Sideview Report Builder? On…  continue reading…

Sideview Utils 2.0 is out!

It’s alive! Well, actually it’s been alive for some time, but it was only launched very quietly. What’s so awesome about it and why should you check it out? Well I’ll leave that to the app’s own page. As always the documentation and all the examples are contained within the app itself, so the best…  continue reading…