Install Step 4, UCM

First, make sure CDR records are being generated

• Log into the Cisco Unified CM Administration interface.
• Go to System > Service Parameters.
• Select your publisher (or one of your publishers). 
• Select the CallManager Service.
• After the parameters load, look under the System section and make sure the CDR Enabled flag is set to true.
• If you have only one cluster, great. Otherwise if this flag was off, or if you have reason to suspect it might be off on the other clusters, repeat for the other clusters/​publishers
  

Get the call quality data as well

• Go to the section Clusterwide Parameters (Device – General) (farther down on that same page).
• Set the item Call Diagnostics Enabled to either Enabled Only When CDR Enabled Flag is True or Enabled Regardless of CDR Enabled Flag.

Specifying our host as an External Billing Server in Cisco Unified Serviceability

• Navigate to Cisco Unified Serviceability using the navigation in the upper right.
• Click Tools then CDR Management.
• Click Add New in the Billing Application Server Parameters section. (What if I don’t have a free slot?***)
• Provide the Host Name or IP Address of the SFTP or FTP host.
• Provide the User Name and Password for the SFTP or FTP user that has been set up.
• Enter the Directory Path of the folder you set up in the SFTP or FTP server.
• Finally, confirm the Resend on Failure option is selected.
• Click Add.

VALIDATION STEPS:

• Confirm there are no errors when you clicked Add above.
• After completing the above steps, check that the SFTP server is receiving files.
• If the current call volume is low, it might take a couple of minutes before the first one shows up. (You can always make a short test call to force a CDR file to be created for that minute.)
• Finally, confirm that the files exist in the location on the file system of the SFTP server where you expect them.

*** If you do not have a free slot to add a new External Billing Server, contact us to discuss how to share a billing server entry with one of the other technologies using the three slots. There are some important details to be aware of on the Splunk side.

Last but not least, go back to the host running the Universal Forwarder and restart the forwarder!

On linux this may look like:

$> /opt/splunkforwarder/bin/splunk restart

You should now have data coming into Splunk momentarily. The next page leads you through checking your data and system and some other data you might want to look into.