User Guide for Cisco Unified Operations Manager 2.1
Using History Reports
Downloads: This chapterpdf (PDF - 398.0KB) The complete bookPDF (PDF - 11.8MB) | Feedback

Using History Reports

Table Of Contents

Using History Reports

Getting Started with History Reports

History Report Tool Buttons

Reports with More than 2,000 Records

Getting Started with Alert and Event History

24-Hour Context-Based Alert and Event History Reports

Customized Alert History and Event History Reports

Exporting 24-Hour and 7-Day Alert and Event History Reports

Generating Customized Alert and Event History Reports

Getting All Stored Information on an Alert

Getting All Stored Information on an Event

Understanding the Alert History Report

Viewing User Annotations from an Alert History Report

Launching Event History from an Alert History Report

Understanding the Event History Report

Viewing Event Properties from an Event History Report

Getting Started with Service Quality History Reports

Exporting 24-Hour and 7-Day Service Quality History Reports

Getting All Stored Information on a Service Quality Event

Understanding the Service Quality History Report

Viewing Service Quality Event Properties


Using History Reports


These topics explain how to use Cisco Unified Operations Manager (Operations Manager) Alert and Event History and Service Quality History reports:

Getting Started with History Reports

Getting Started with Alert and Event History

Generating Customized Alert and Event History Reports

Understanding the Alert History Report

Understanding the Event History Report

Getting Started with Service Quality History Reports

Understanding the Service Quality History Report

Getting Started with History Reports

Alert and Event History reports and Service Quality History reports enable you to view alerts and events that occurred during the past year. The available information includes alert status and date, related device and device components, annotations (informational text you entered), and event details. Depending on the criteria you use to generate the report, the Alert and Event History reports can display information for both devices and clusters. Operations Manager purges the Alert History database daily to retain only 31 days of history; see Viewing Purge Scheduler Status, page 20-11.


Note Service Quality History is useful only if you have purchased a license for Cisco Unified Service Monitor (Service Monitor). For more information, see User Guide for Cisco Unified Service Monitor.


For more information, see the following topics:

Getting Started with Alert and Event History

Getting Started with Service Quality History Reports

History Report Tool Buttons

Table 12-1 explains the tool buttons that appear in the upper-right corner of history reports.

Table 12-1 Alert and Event History Report Window Tool Buttons

Icon
Meaning

Exports the current report to a CSV file.

Note The PDF export option is not available from Alert, Event, and Service Quality event history reports.

Opens a printer-friendly version for printing.

Opens context-sensitive help.


Reports with More than 2,000 Records

The Alert History and Event History reports display up to 2,000 records that you can scroll or page through. If your report exceeds 2,000 records and you want to view all of them, use the Export tool button to save all of the information to a CSV file.

Getting Started with Alert and Event History

You can generate 24-hour context-based reports from various Operations Manager pages, such as the Topology display. You can also generate customized history reports for which you supply the search criteria and set the date range. You can generate Event History reports for devices, device components, and clusters. You can also export 24-hour and 7-day reports automatically.

Several conditions exist in Alert and Event History displays as follows:

The Alert History limit is increased to 2,000 and Alerts and Events Display (AAD) limitation is 1,000.

Symptom: The Alerts and Events View displays only the first 999 alerts and Alerts Display Window (ADV) limitation is 1,000 events.

Conditions: When over 1,000 events exist for a given alert, the Alerts Display Window displays the first 1,000 events. The remaining events are not displayed, although they exist in the database.

Workaround: View the remainder of the more than 1,000 events for that alert in the Alert and Event report.

Symptom: When over 5,000 events are generated in the network at a time, some events are dropped by Alert and Event History.

Conditions: The Alert and Event History processes up to 5,000 events during a burst of more than 5,000 events.

Workaround: View the events in the Alerts and Events display. These events are processed by the system and displayed in this display.Note that if the events get cleared they are not displayed on the Alerts and Events Display after 30 to 60 minutes.

24-Hour Context-Based Alert and Event History Reports

On various Operations Manager pages, such as the Alerts and Events display, you can select Alert History or Event History links or menu items. When you click an Alert History or Event History link, you generate a context-based report that displays relevant history records:

For which you do not need to enter search criteria.

For the past 24 hours.

You can also generate customized Alert History and Event History reports for a time period that you select and include records based on search criteria that you specify. Alert History and Event History reports include the same type of information whether you generate context-based or customized reports.

You can generate 24-hour context-based history reports from various Operations Manager pages. For example, from:

Service Level View—You can launch an Alert History report for a device or cluster.

Phone Activity display—You can launch a Service Quality History report for a phone model.


Note Operations Manager stores Service Quality history if you have purchased a license for Service Monitor. For more information, see User Guide for Cisco Unified Service Monitor.


Customized Alert History and Event History Reports

You might want to generate an Alert History report or an Event History report when:

A significant alert is shown in the Alerts and Events display, and you want to see how often the alert has been generated in the last month.

You receive an e-mail notification that an unusual event has occurred.

You want to search for information on events and alerts other than those you are tracking in your customized Alerts and Events display.

You can generate an Event History report to gather information on:

All events that caused an alert.

Events that occurred on components of a device.

Occurrences of the same event on different devices.

Clusters (which can be selected under device groups).

Exporting 24-Hour and 7-Day Alert and Event History Reports

Use this procedure to automatically generate 24-hour Alert and Event History reports daily at midnight and 7-day Alert and Event History reports weekly at midnight on Monday. You can generate these reports in comma-separated value (CSV) format, save them on disk, and e-mail them.


Step 1 Select Reports > Alert and Event History > Export. The automatically Export Alert and Event Reports page appears.

Step 2 For each report that you want to generate, select CSV to save the report as a comma-separated-values file.

Reports that you can generate are:

All alerts for the last 24 hours—24-hour reports are named AlertReports_Daily_ddmmyyyy.filetype, for example AlertReports_Daily_20Apr2006.csv

All alerts for the last 7 days—7-day reports are named AlertReports_Weekly_ddmmyyyy.filetype, for example AlertReports_Weekly_17Apr2006.csv. 7-day reports run weekly on Monday at midnight.

All events for the last 24 hours—24-hour reports are named EventReports_Daily_ddmmyyyy.filetype, for example EventReports_Daily_20Apr2006.csv.

All events for the last 7 days—7-day reports are named EventReports_Weekly_ddmmyyyy.filetype, for example EventReports_Weekly_17Apr2006.csv. 7-day reports run weekly on Monday at midnight.

Step 3 Enter one or more locations to store or send the report:

If you want to store the reports on disk, enter (or browse to and select) a location on the server.


Note Casuser and administrator have write permissions in the default directory. If you change the directory, make sure that the directory has write permission for casuser. If you do not, the export files will not be created.


If you want to e-mail the reports, enter a fully qualified e-mail address.

Step 4 Click Apply.


Generating Customized Alert and Event History Reports

To gather historical information on alerts and events in the past 31 days, start Alert and Event History from the Operations Manager home page by selecting Reports > Alert and Event History. The following topics explain how you can apply filters and generate reports based on all information stored in the Alert History database:

To search for alerts by alert ID, devices, or group, see Getting All Stored Information on an Alert.

To search for events on devices by event ID, device, alert ID, or group, see Getting All Stored Information on an Event.

To search for Service Quality events on Cisco 1040s, call endpoints, or phone models, see Getting All Stored Information on a Service Quality Event.


Note Service Quality History reports are available only if you have purchased a license for Service Monitor.


Getting All Stored Information on an Alert

You can search the Alert History database for alerts using one of the following methods:

Searching for Alerts by Alert ID

Searching for Alerts by Device

Searching for Alerts by Device Group

Searching for Alerts by Date


Note Alternatively, to generate a 24-hour report of all alerts in your current view, launch Alert History for the selected view from the Alerts and Events window. See Monitoring Alerts and Events, page 3-1.


Searching for Alerts by Alert ID

To determine how often a specific alert has occurred, search for the alert by its alert ID. The alert ID is displayed in the Alerts and Events display.


Step 1 Select Reports > Alert and Event History > Alert History > Alert. The Alert History: Search by Alert ID page appears.

Step 2 Set your search criteria:

a. Enter the alert ID.

b. Select all alert severity levels that you want to search for.

c. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Alert History report opens. This report contains information on both devices and clusters. For an explanation of the report contents, see Understanding the Alert History Report.


Searching for Alerts by Device

Use this procedure to determine what types of alerts are occurring on a specific device.


Step 1 Select Reports > Alert and Event History > Alert History > Devices. The Alert History: Search by Device page appears.

Step 2 Set your search criteria:

a. Enter a comma-separated list of devices (as they are listed by Device Management).

b. Select all alert severity levels that you want to search for.

c. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Alert History report opens. This report contains information on devices only. For an explanation of the report contents, see Understanding the Alert History Report.


Searching for Alerts by Device Group

To determine what type of alerts are occurring in a specific device group, use this procedure.


Step 1 Select Reports > Alert and Event History > Alert History > Device Groups. The Alert History: Search by Group page appears.

Step 2 Set your search criteria:

a. Select the device group. You can also select multiple devices from different groups.

b. Select all alert severity levels that you want to search for.

c. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Alert History report opens. This report contains information on devices only. For an explanation of the report contents, see Understanding the Alert History Report.


For more information, see the following topics:

Customizing Events, page 15-23

Events Processed, page E-1

Searching for Alerts by Date

To determine what type of alerts are occurring during a specific day, week, month, or range of dates, use this procedure.


Step 1 Select Reports > Alert and Event History > Alert History > Date. The Alert History: Search by Date page appears.

Step 2 Select the date range and enter:

Today.

7 days (from current date to date).

One Month (from current date to date).

From: date and to: a date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.).

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found. The Alert History report opens. This report contains information on both devices and clusters. For an explanation of the report contents, see Understanding the Alert History Report.


For more information, see the following topics:

Customizing Events, page 15-23

Events Processed, page E-1

Getting All Stored Information on an Event


Note For information about Service Quality events, see Getting All Stored Information on a Service Quality Event.


You can search the Alert History database for events using one of the following methods:

Searching for Events by Event ID

Searching for Events by Device

Searching for Events by Alert

Searching for Events by Device Group

Searching for Events by Date


Note Alternatively, to generate a 24-hour report of all events on a device component, click the Event History link on the Alerts Detail page. See Monitoring Alerts and Events, page 3-1.


Searching for Events by Event ID

To determine how often a specific event has occurred, search for the event by its event ID. The event ID is displayed on the Alert Details display.


Step 1 Select Reports > Alert and Event History > Event History > Event. The Event History: Search by Event ID page appears.

Step 2 Set your search criteria:

a. Enter the event ID.

b. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Event History report opens. This report contains information on both devices and clusters. For an explanation of the report contents, see Understanding the Event History Report.


Searching for Events by Device

Use this procedure to determine what types of events are occurring on a specific device.


Step 1 Select Reports > Alert and Event History > Event History > Devices. The Event History: Search by Device page appears.

Step 2 Set your search criteria:

a. Enter a comma-separated list of devices (as they are listed by Device Management). You can select multiple devices from different groups.

b. Enter the event description by clicking the popup selector box and selecting the events for which you want to search. By default, all events are selected. (See Selecting Event Descriptions for an Event History Report.)

c. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Event History report opens. This report contains information on devices only. For an explanation of the report contents, see Understanding the Event History Report.


Selecting Event Descriptions for an Event History Report

By default all events are selected on the Event Descriptions dialog box.


Note The Event Description filter window under Reports > Alert and Event History > Device group displays default event names. When the event report is launched, the customized name will be displayed. To determine the default name is for customized events, go to Notifications ->Event Customization.



Step 1 Deselect events that you do not want to include in the Event History report. (When you deselect an event, if checked, the All check box at the top of the dialog box is also deselected.)

Step 2 Do one of the following:

Click Select at the top or bottom of the dialog box to finalize your selections.

Select Cancel at the top or bottom of the dialog box to cancel your selections and return to the default list of all events.


Searching for Events by Alert

To view the events that correspond to a specific alert, use this procedure.


Step 1 Select Reports > Alert and Event History > Event History > Alert. The Event History: Search by Alert ID page appears.

Step 2 Set your search criteria:

a. Enter the Alert ID.

b. (Optional) Enter the event description by clicking the popup selector box and selecting the events for which you want to search. (See Selecting Event Descriptions for an Event History Report.)

c. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Event History report opens. This report contains information on both devices and clusters. For an explanation of the report contents, see Understanding the Event History Report.


Searching for Events by Device Group

To determine what types of events are occurring in a specific device group, use this procedure.


Step 1 Select Reports > Alert and Event History > Event History > Device Groups. The Event History: Search by Device Group page appears.

Step 2 Set your search criteria:

a. Select one or more device groups.

b. Enter the event description by clicking the popup selector box and selecting the events for which you want to search.

c. Select all alert severity levels that you want to search for.

d. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Event History report opens. This report contains information on devices only. For an explanation of the report contents, see Understanding the Event History Report.


For more information, see the following topics:

History Report Tool Buttons

Customizing Events, page 15-23

Events Processed, page E-1

Searching for Events by Date

To determine what type of alerts are occurring during a specific day, week, month, or range of dates, use this procedure.


Step 1 Select Reports > Alert and Event History > Event History > Date. The Event History: Search by Date page appears.

Step 2 Select the date range and enter:

Today.

7 days.

One Month.

From: a date and to: a date—Enter or select dates.

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Event History report opens. This report contains information on both devices and clusters. For an explanation of the report contents, see Understanding the Event History Report.


For more information, see the following topics:

History Report Tool Buttons

Customizing Events, page 15-23

Events Processed, page E-1

Understanding the Alert History Report

The Alert History report (shown in Figure 12-1) is a scrollable table that lists up to 1,000 records, based on your search criteria. To view database contents beyond the 1,000 records, click the Export tool button in the upper-right corner of the window.

Figure 12-1 Alert History Report

The Alert History report window provides tools, as shown in Table 12-1.

Table 12-2 describes the contents of the Alert History report.

Table 12-2 Alert History Report—Contents 

Heading
Description

Alert ID

Alert identifier number. Clicking this link opens the Event History report (see Figure 12-4), which contains details about the events associated with the alert.

Device Name

Device name or IP address.

Device Type

Device type. Inventory Collection in Progress indicates that Operations Manager was discovering the device or cluster at the time of the alert. The actual device type is reflected when new events occur. The device type is displayed as N/A during inventory collection. For more information, see Chapter 16, "Using Device Management."

Description

Alert category, one of the following: Application, Connectivity, Environment, Interface, Other, Reachability, System Hardware, Utilization. For alerts containing multiple events, the report shows the category of the event with the most recent change.

For alerts containing multiple events, the report shows the category of the event with the most recent change.

Severity

Critical, Warning, or Informational.

Time

Date and time when the alert was generated.

Status

Alert status, based on last polling.

Active

Cleared

Acknowledged


Viewing User Annotations from an Alert History Report

From an Alert History report, click a link in the Status column to open the alert annotation page.

Figure 12-2 shows an alert annotation page, which lists any notes that users have entered using the Alert Details page. (For more information, see Responding to Alerts, page 3-28.)

Figure 12-2 Alert Annotation Page

Launching Event History from an Alert History Report

To launch an Event History report from an Alert History report, click the alert ID link that interests you. The Event History report opens in a new window and lists the events that caused the alert to be generated.

Understanding the Event History Report


Note Service Quality events are reported on Service Quality History reports. See Understanding the Service Quality History Report.


The Event History report lists events. For each event, the Event History report includes:

Device on which the event occurred

Component on which the event occurred

Time of the event

Current status of the event

Event ID link to open the Event Properties page and view current attribute or threshold values compared with the values at the time the event occurred

Figure 12-3 provides an example of an Event History report.

Figure 12-3 Event History Report

The Event History report window provides tool buttons in the upper-right corner of the window; these are described in Table 12-1.

Table 12-3 describes the contents of the Event History report in more detail.

Table 12-3 Event History Report—Contents 

Heading
Description

Event ID

Event identifier number. Clicking this link opens the event properties page (see Figure 12-4), which describes the value of MIB attributes currently and at the time of the event.

Device Name

Device name or IP address.

Component

Device element on which the event occurred.

Description

Operations Manager event name (as described in Appendix E, "Events Processed"). You can also customize the names of events displayed by Event History (and the Alerts and Events display) using the Event Customization feature in Notifications. For more information, see Customizing Events, page 15-23.

Time

Date and time when the event was generated.

Status

Event status, based on last polling.

Active

Event is live.

Cleared

Event is no longer live. Also, when a device is suspended, all alerts are cleared. When Operations Manager polling determines that an alarm has been in the Cleared state for 30 minutes or more (from the time of polling), the alarm expires and is removed from the Alerts and Events display.

Suspended

Device is suspended.

Resumed

Device is being resumed.

Deleted

Device has been deleted.

Alert ID

Alert identifier number associated with this event.


Viewing Event Properties from an Event History Report

From an Event History report, click an event in the Event ID column to open the Event Properties page. The page lists more information about an event, such as the value of MIB attributes, polling and threshold information, and utilization information. Values at the time of the event are listed alongside current values.

Figure 12-4 shows an example of the event properties page.

Figure 12-4 Event Properties Page

Getting Started with Service Quality History Reports

This section contains the following topics:

Exporting 24-Hour and 7-Day Service Quality History Reports

Getting All Stored Information on a Service Quality Event

Exporting 24-Hour and 7-Day Service Quality History Reports

Use this procedure to automatically generate 24-hour Service Quality History reports daily at midnight and 7-day Service Quality History reports weekly at midnight on Monday. You can generate these reports in comma-separated value (CSV) format, save them on disk, and e-mail them.


Step 1 Select Reports > Service Quality History > Event History > Export. The automatically Export Service Quality Reports page appears.

Step 2 Select one or more reports and report formats:

All issues for the last 24 hours—Select one or more check boxes to generate and save a 24-hour Service Quality History report as CSV (a comma-separated-values file).


Note 24-hour reports are named ServiceQualityReports_Daily_ddmmyyyy.filetype, for example ServiceQualityReports_Daily_20Apr2006.csv.


All issues for the last 7 days—Select one or more check boxes to generate and save a 7-day Service Quality History report as CSV.


Note 7-day reports are named ServiceQualityReports_Weekly_ddmmyyyy.filetype, for example ServiceQualityReports_Weekly_20Apr2006.csv. 7-day reports run weekly on Monday at midnight.


Step 3 Enter one or more locations to store or send the report:

If you want to store the reports on disk, enter (or browse to and select) a location on the server.


Note Casuser and administrator have write permissions in the default directory. If you change the directory, make sure that the directory has write permission for casuser. If you do not, the export files will not be created.


If you want to e-mail the reports, enter a fully qualified e-mail address.

Step 4 Click Apply. The reports will be generated daily at midnight.


Getting All Stored Information on a Service Quality Event


Note Service Quality History reports are only available if you have purchased a license for Service Monitor. For more information, see User Guide for Cisco Unified Service Monitor.


You can search the Alert History database for Service Quality events using one of the following methods:

Searching for Service Quality Events by MOS

Searching for Service Quality Events by Destination

Searching for Service Quality Events by Codec

Searching for Service Quality Events by Phone Model

Searching for Service Quality Events by Cisco 1040

Searching for Service Quality Events by Date

Searching for Service Quality Events by MOS

To view the Service Quality events for MOS less than a value that you supply, use this procedure.


Step 1 Select Reports > Service Quality History > Event History > MOS. The Service Quality History: Search by MOS page appears.

Step 2 Set your search criteria:

a. MOS less than—Enter the lowest value. The range of MOS values is .1 to 4.9.

b. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Service Quality History report opens. For an explanation of the report contents, see Understanding the Service Quality History Report.


Searching for Service Quality Events by Destination

To view the Service Quality events that correspond to call endpoints, use this procedure.


Step 1 Select Reports > Service Quality History > Event History > Destination. The Service Quality History: Search by Destination page appears.

Step 2 Set your search criteria:

a. Select an operator:

Is exactly

Begins with

Contains

b. Enter the destination—IP address for a phone, voice gateway, or Cisco 1040.

c. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Service Quality History report opens. For an explanation of the report contents, see Understanding the Service Quality History Report.


Searching for Service Quality Events by Codec

To view the Service Quality events for a particular codec, use this procedure.


Step 1 Select Reports > Service Quality History > Event History > Codec. The Service Quality History: Search by Codec page appears.

Step 2 Set your search criteria:

a. Select a codec from the list.

b. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Service Quality History report opens. For an explanation of the report contents, see Understanding the Service Quality History Report.


Searching for Service Quality Events by Phone Model

To view the Service Quality events that correspond to specific phone models, use this procedure.


Step 1 Select Reports > Service Quality History > Event History > Phone Model. The Service Quality History: Search by Phone Model(s) page appears.

Step 2 Set your search criteria:

a. Click the popup selector box and select the phone models for which you want to search.

b. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Service Quality History report opens. For an explanation of the report contents, see Understanding the Service Quality History Report.


Searching for Service Quality Events by Cisco 1040

To view the Service Quality events that correspond to specific Cisco 1040, use this procedure.


Step 1 Select Reports > Service Quality History > Event History > Cisco 1040. The Service Quality History: Search by Cisco 1040 page appears.

Step 2 Set your search criteria:

a. Select an operator (Is exactly, Begins with, Contains) and enter a Cisco 1040 ID or portion of a Cisco 1040 ID.


Note Cisco 1040 IDs include a letter and a 3-digit number.


b. Select the date range:

Today.

One Month (from date to date).

From: date and to: date—Select dates (or enter dates using this format: dd-Mmm-yyyy, for example, 04-Mar-2006.)

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Service Quality History report opens. For an explanation of the report contents, see Understanding the Service Quality History Report.


Searching for Service Quality Events by Date

To view the Service Quality events for specific dates, use this procedure.


Step 1 Select Reports > Service Quality History > Event History > Date. The Service Quality History: Search by Date page appears.

Step 2 Select one and enter dates if required:

Today.

7 days

1 month.

From: a date and to: a date—Enter dates.

Step 3 Click View. If more than 1,000 records match your search criteria, a popup window reports the total number of records found.

The Service Quality History report opens. For an explanation of the report contents, see Understanding the Service Quality History Report.


For more information, see the following topics:

History Report Tool Buttons

Customizing Events, page 15-23

Events Processed, page E-1

Understanding the Service Quality History Report


Note Service Quality History is useful only if you have purchased a license for Service Monitor. For more information, see User Guide for Cisco Unified Service Monitor.


The Service Quality History report is a scrollable table that lists up to 1,000 records, based on your search criteria. To view database contents beyond the 1,000 records, click the Export tool button in the upper-right corner of the window.

The Service Quality History report window provides tools, as shown in Table 12-1.

Table 12-4 describes the contents of the Service Quality History report.

Table 12-4 Service Quality History Report—Contents 

Heading
Description

Severity

Event severity:

Warning—MOS is below the MOS threshold configured on Service Monitor. For more information, see User Guide for Cisco Unified Service Monitor.

Critical—MOS is below the MOS threshold configured on Operations Manager. For more information, see Configuring Service Quality Event Settings, page 20-7.

Event ID

Click this link to open the event properties window. See Viewing Service Quality Event Properties.

Destination Type

One of the following:

Endpoint

IP Phone

Destination

IP address or phone extension.

IP Address

Destination IP address.

MOS

Mean Opinion Score that triggered the event.

Cause

One of the following:

Jitter

Latency

Time

Date and time that the event occurred.

Codec

One of the following:

G711Alaw64k

G711Alaw56k

G711Ulaw64k

G711Ulaw56k

G722 64k

G722 56k

G722 48k

G728

G729

G729AnnexA

G729AnnexB

G729AnnexAwAnnexB

Source Type

One of the following:

Endpoint

IP Phone

Source

IP address or phone extension.

IP Address

Source IP address.


Viewing Service Quality Event Properties


Step 1 Click an event ID link on the Service Quality History report to view properties of the event. See Understanding the Service Quality History Report.


Table 12-5 describes the contents of the service quality Event Properties window.

Table 12-5 Service Quality Event Properties Window—Contents 

Heading
Description

Destination

Extension number, or N/A if destination type is Endpoint

Destination IP Address

IP address for an endpoint or an IP phone

Destination Type

One of the following:

Endpoint

IP Phone

Media Server

Destination Model

Phone model, or N/A if destination type is Endpoint

Switch for Destination

IP address, or N/A if destination type is Endpoint

Destination Port

Port type and slot; for example Gi1/0/23

Source

Extension number or IP address

Source IP Address

IP address, or N/A if destination type is Endpoint

Source Type

One of the following:

IP Phone

Endpoint

Source Model

Phone model, or N/A if source type is Endpoint

Switch for Source

IP address, or N/A if source type is Endpoint

Source Port

Port type and slot, or N/A if source type is Endpoint

Detection Algorithm

Algorithm used to calculate MOS. One of these:

ITU G.107 - 1040 Sensor based voice quality

Indicates that MOS is calculated on a Cisco 1040 Sensor

CVTQ - Phone based voice quality

Indicates that MOS is calculated on an IP phone or Cisco voice gateway using the Cisco Voice Transmission Quality algorithm

MOS

MOS value during event

Critical MOS Threshold

MOS threshold configured on Operations Manager (see Configuring Service Quality Event Settings, page 20-7)

Cause

One of the following:

Jitter

Latency

Packet Loss

Codec

Codec in use on the destination; one of the following:

G711Alaw64k

G711Alaw56k

G711Ulaw64k

G711Ulaw56k

G722 64k

G722 56k

G722 48k

G728

G729

G729AnnexA

G729AnnexB

G729AnnexAwAnnexB

Jitter

Msec

Packet loss

Number of packets

Details for Events that Are Based on Data from a Sensor

Sensor MAC

Sensor MAC—Sensor MAC address

Number of suppressed traps

The number of traps that Cisco Unified Service Monitor suppressed between the suppression start time and suppression end time

Note For a given endpoint, Service Monitor sends a trap every n (a configurable number) minutes, and additional traps during that time are suppressed (not sent). For more information, see User Guide for Cisco Unified Service Monitor.

Suppression start time

Date and time that Service Monitor started to suppress traps for this endpoint

Suppression end time

Date and time that Service Monitor stopped suppressing traps for this endpoint

Details for Events that Are Based on Data from a Cluster

CVTQ version

Version of CVTQ algorithm used to calculate MOS

Cluster ID

Cisco Unified Communications Manager cluster ID

Cumulative Concealment Ratio

Total number of concealment frames divided by the total number of speech frames received from the start of the voice stream

Interval Concealment Ratio

Ratio of concealment frames to speech frames in the preceding 3-second interval of active speech. If using voice activity detection (VAD), a longer interval might be required to accumulate 3 seconds of active speech.

Max Incremental Concealment Ratio

Highest interval concealment ratio from start of the voice stream

Concealment
Seconds

Number of seconds during which concealment events (lost frames) occurred since the start of the voice stream (includes severely concealed seconds)

Severely Concealed
Seconds

Total number of seconds with more than 5 percent concealment frames

Call duration

Hours, minutes, and seconds, formatted as nh nm ns. For example, a 123-second call would be displayed as 2m 3s.

MOS during last 8 secs

MOS value during the last 8 seconds of the call

Min MOS during call

Minimum MOS value during the call

Max MOS during call

Maximum MOS value during the call