Whether the call leg was answered after a redirection. Possible values:

• Yes

• No

• Yes-PostRedirection

The time the call was answered. Time is in UTC.

Whether the call leg was answered. For example, in a hunt group case, some legs will be unanswered, and one will be answered.

The authorization code admin created for a location or site for users to use. Collected by the Account/Authorization Codes or Enhanced Outgoing Calling Plan services.

SIP Call ID used to identify the call. You can share the Call ID with Cisco TAC to help them pinpoint a call if necessary.

Identifies whether the call was set up or disconnected normally. Possible values:

• Success: Call is routed and disconnected successfully. Includes Normal, UserBusy, and NoAnswer scenarios.

• Failure: Call failed with an internal or external error.

• Refusal: Call is rejected because of call block or timeout. You can find more information in the Call outcome reason field.

Additional information about the Call outcome returned. Possible reasons are:

• Success

  • Normal: Call is completed successfully.
  • UserBusy: Call is a success, but the user is busy.
  • NoAnswer: Call is a success, but the user didn't answer.

• Refusal

  • CallRejected: The call recipient didn’t want to receive the call and rejected the call.
  • UnassignedNumber: The dialed number isn't assigned to any user or service.
  • SIP408: Request timed out because couldn’t find the user in time.
  • InternalRequestTimeout: Request timed out as the service couldn’t fulfill the request due to an unexpected condition.
  • Q850102ServerTimeout: Recovery on timer expiry/server timed out
  • NoUserResponse: No response from any end-user device/client
  • NoAnswerFromUser: No answer from the user.
  • SIP480: Callee or called party is currently unavailable.
  • SIP487: Request is terminated by bye or cancel.
  • TemporarilyUnavailable: User is temporarily unavailable.
  • AdminCallBlock: Call attempt is rejected by an upstream intermediary machine, process or human.
  • UserCallBlock: Call attempt from a client is rejected or blocked by the user.
  • Unreachable: Unable to route the call to the desired destination.

• Failure

  • DestinationOutOfOrder: Service request failed as the destination can’t be reached or the interface to the destination isn’t functioning correctly.
  • SIP501: Invalid method and can’t identify the request method.
  • SIP503: Service is temporarily unavailable so can’t process the request.
  • ProtocolError: Unknown or unimplemented release code.
  • SIP606: Some aspect of the session description wasn't acceptable.
  • NoRouteToDestination: No route available to the destination
  • Internal: Failed because of internal Webex Calling reasons.

Indicates the time at which the call transfer service was invoked during the call. The invocation time is shown using the UTC/GMT time zone format.

Type of call. For example:

• SIP_MEETING

• SIP_INTERNATIONAL

• SIP_SHORTCODE

• SIP_INBOUND

• UNKNOWN

• SIP_EMERGENCY

• SIP_PREMIUM

• SIP_ENTERPRISE

• SIP_TOLLFREE

• SIP_NATIONAL

• SIP_MOBILE

For incoming calls, the calling line ID of the user. For outgoing calls, it's the calling line ID of the called party.

For incoming calls, the telephone number of the user. For outgoing calls, it's the telephone number of the called party.

For incoming calls, the calling line ID of the calling party. For outgoing calls, it's the calling line ID of the user.

For incoming calls, the telephone number of the calling party. For outgoing calls, it's the telephone number of the user.

The type of client that the user (creating this record) is using to make or receive the call. For example:

• SIP

• WXC_CLIENT

• WXC_THIRD_PARTY

• TEAMS_WXC_CLIENT

• WXC_DEVICE

• WXC_SIP_GW

The version of the client that the user (creating this record) is using to make or receive the call.

Correlation ID to tie together multiple call legs of the same call session.

A unique identifier for the user's department name.

The MAC address of the device, if known.

The keypad digits as dialed by the user, before pre-translations. This field reports multiple call dial possibilities:

• Feature access codes (FAC) used for invoking features such as Last Number Redial or a Call Return.

• An extension that got dialed and a mis-dialed keypad digit from a device/app.

• When a user must dial an outside access code (for example, 9+) before dialing a number, this access code is also reported, as well as the digits dialed thereafter. Note that when pre-translations have no effect, the dialed digits field contains the same data as the called number field. This field is only used for originating (outgoing) Calls and is not available for terminating (incoming) Calls.

Whether the call was inbound or outbound. The possible values are:

• ORIGINATING

• TERMINATING

The length of the call in seconds.

Each call consists of four UUIDs known as Local Session ID, Final Local Session ID, Remote Session ID and Final Remote Session ID.

• The Session ID comprises a Universally Unique Identifier (UUID) for each user-agent participating in a call.

• It can be used for end-to-end tracking of a SIP session in IP-based multimedia communication systems in compliance with RFC 7206 and draft-ietf-insipid-session-id-15.

• The Local SessionID is generated from the Originating user agent.

• The Remote SessionID is generated from the Terminating user agent.

• The Final Local Session ID has the value of the Local Session ID at the end of the call.

• The Final Remote Session ID has the value of the Remote Session ID at the end of the call.

Each call consists of four UUIDs known as Local Session ID, Final Local Session ID, Remote Session ID and Final Remote Session ID.

• The Session ID comprises a Universally Unique Identifier (UUID) for each user-agent participating in a call.

• It can be used for end-to-end tracking of a SIP session in IP-based multimedia communication systems in compliance with RFC 7206 and draft-ietf-insipid-session-id-15.

• The Local SessionID is generated from the Originating user agent.

• The Remote SessionID is generated from the Terminating user agent.

• The Final Local Session ID has the value of the Local Session ID at the end of the call.

• The Final Remote Session ID has the value of the Remote Session ID at the end of the call.

Inbound trunk may be presented in Originating and Terminating records.

The country code of the dialed number. This is only populated for international calls.

A unique identifier that is used to correlate CDRs and call legs with each other. This ID is used in conjunction with:

• Remote call ID: To identify the remote CDR of a call leg.

• Transfer related call ID: To identify the call transferred leg.

Each call consists of four UUIDs known as Local Session ID, Final Local Session ID, Remote Session ID and Final Remote Session ID.

• The Session ID comprises a Universally Unique Identifier (UUID) for each user-agent participating in a call.

• It can be used for end-to-end tracking of a SIP session in IP-based multimedia communication systems in compliance with RFC 7206 and draft-ietf-insipid-session-id-15.

• The Local SessionID is generated from the Originating user agent.

• The Remote SessionID is generated from the Terminating user agent.

• The Final Local Session ID has the value of the Local Session ID at the end of the call.

• The Final Remote Session ID has the value of the Remote Session ID at the end of the call.

Location of the report.

The device model type the user is using to make or receive the call.

A unique identifier that shows if other CDRs are in the same call leg. Two CDRs belong in the same call leg if they have the same Network call ID.

A unique identifier for the organization that made the call. This is a unique identifier across Cisco.

Call redirection reason for the original called number. For example:

• Unconditional: Call Forward Always (CFA) service, Group night forwarding.

• NoAnswer: The party was not available to take the call. CF/busy or Voicemail/busy.

• Deflection: Indication that a call was redirected. Possible causes could be Blind transfer, Auto attendant transfer, Transfer out of a Call center etc.

• TimeOfDay: Call scheduled period of automated redirection. CF/selective, group night forwarding.

• UserBusy: DND enabled or the user willingly declined the call. CF/busy or voicemail/busy.

• FollowMe: Automated redirection to a personal redirecting service which could be Simultaneous Ringing, Sequential Ringing, Office Anywhere, or Remote Office.

• CallQueue: A call center call to an agent or a user (a member of the call queue).

• HuntGroup: A hunt-group-based call to an agent or a user (denotes a member of the hunt group).

• Unavailable: To voicemail, when the user has no app or device.

• Unrecognized: Unable to determine the reason.

• Unknown: Call forward by phone with no reason.

• ExplicitIdxxx: Enterprise voice portal redirection to the user’s home voice portal. The “xxx” portion is the digits collected from the caller, identifying the target mailbox (Extension or DN).

• ImplicitId: Indicates an enterprise voice portal redirection to the user’s home voice portal.

The operating system that the app was running on, if available.

Outbound trunk may be presented in Originating and Terminating records.

The time the call was finished, in UTC.

The length of ringing before the call was answered or timed out, in seconds.

Call Redirection Reason for the redirecting number. For example:

• Unconditional: Call Forward Always (CFA) service.

• NoAnswer: The party was not available to take the call. CF/busy or Voicemail/busy.

• Deflection: Indication that a call was redirected. Possible causes could be Blind transfer, Auto attendant transfer, Transfer out of a Call center etc.

• TimeOfDay: Automated redirection based on the time of the call. Call Forwarding Selective, Call Forwarding Mode-Based, or Group Night

• UserBusy: DND enabled or user willingly declined the call. CF/busy or Voicemail/busy.

• FollowMe: Automated redirection to a personal redirecting service which could be Simultaneous Ringing, Sequential Ringing, Office Anywhere, or Remote Office.

• CallQueue: A call center call to an agent or a user (denotes a member of the call queue).

• HuntGroup: A hunt-group-based call to an agent or a user (denotes a member of the hunt group).

• Unavailable: To voicemail, when the user has no app or device.

• Unrecognized: Unable to determine the reason.

• Unknown: Call forward by phone with no reason.

• ExplicitIdxxx: Enterprise voice portal redirection to the user’s home voice portal. The “xxx” portion is the digits collected from the caller, identifying the target mailbox (Extension or DN).

• ImplicitId: Indicates an enterprise voice portal redirection to the user’s home voice portal.

When the call has been redirected one or more times, this field reports the last redirecting number. Identifies who last redirected the call. Only applies to call scenarios such as transfer, call forwarded calls, simultaneous rings, etc.

Call identifier of a different call that was created by this call because of a service activation. The value is the same as the Local call ID field of the related call. You can use this field to correlate multiple call legs connected through other services.

Indicates a trigger that led to a change in the call presence. The trigger could be for this particular call or redirected via a different call. For example:

• ConsultativeTransfer: While on a call, the call was transferred to another user by announcing it first. meaning the person was given a heads up or asked if they're interested in taking the call and then transferred.

• CallForwardSelective: Call Forward as per the defined schedule. Might be based on factors like a specific time, specific callers or to a VM. It always takes precedence over Call Forwarding.

• CallForwardAlways: Calls are unconditionally forwarded to a defined phone number or to VM.

• CallForwardNoAnswer: The party was not available to take the call.

• CallQueue: A call center call to an agent or a user (denotes a member of the call queue).

• HuntGroup: A hunt group based call to an agent or a user (denotes a member of the hunt group).

• CallPickup: The user part of a pickup group or pickup attempted by this user against a ringing call for a different user or extension.

• CalllPark: An ongoing call was parked, assigned with a parked number (not the user’s phone number).

• CallParkRetrieve: Call park retrieval attempt by the user, either for a different extension or against the user’s own extension.

• Deflection: Indication that a call was redirected. Possible causes could be Blind transfer, Auto-attendant transfer, Transfer out of a Call center, etc.

• FaxDeposit: Indicates a FAX was transmitted to the FAX service.

• PushNotificationRetrieval: Push notification feature usage indication. Means that a push notification was sent to wake up the client and get ready to receive a call.

• BargeIn: Indicates the user barged-in to someone else’s call.

• VoiceXMLScriptTermination: Route Point feature usage indication.

• AnywhereLocation: Indicates call origination towards the single number reach location.

• AnywherePortal: Indicates call origination towards the “user” identified by the single number reach portal.

• Unrecognized: Unable to determine the reason.

• CallForwardBusy: The user willingly declined the call, or DND was enabled that then redirected the call to a defined phone number or voice mail.

• CallForwardNotReachable: Hunt group redirection for an agent who is not reachable.

• CallRetrieve: The user triggered the call retrieve option to pick up a call that was parked.

• CallRecording: The user initiated the call recording service that triggered Start/Pause/Resume/Stop recording options.

• DirectedCallPickup: Indicates this user belonged to a call pickup group who answered the call or answered when another member of the call pickup group in a location was busy.

• Executive: The user has been configured using the Executive/Executive assistant service who is allowed to handle calls on someone else's behalf. Also known as Boss-admin.

• ExecutiveAssistantInitiateCall: The user has been configured as an Executive assistant who placed or initiated the call on someone else’s (Boss admin's) behalf.

• ExecutiveAssistantDivert: The user has been configured as an Executive assistant who had call forwarding enabled to a defined phone number.

• ExecutiveForward: The Executive (Boss-admin) had a call forward setting enabled to a defined number. Generally triggered when an ExecutiveAssistant did not pick a call.

• ExecutiveAssistantCallPush: The user has been configured as an Executive assistant who received a call and pushed that call out (using #63) to the Executive’s (Boss-admin's) number.

• Remote Office: Indicates the call was made to reach the remote location of the user.

• RoutePoint: Indicates an incoming and queued call to an agent (for incoming calls to the route point).

• SequentialRing: Indicates this user is in the list of phone numbers, which are alerted sequentially upon receiving an incoming call that matches a set of criteria.

• SimultaneousRingPersonal: Indicates this user was in the list of multiple destinations that are to ring simultaneously when any calls are received on their phone number (the first destination answered is connected).

• CCMonitoringBI: The indication that a Call Queue supervisor invoked silent monitoring.

Indicates which party released the call first. The possible values are:

• Local: Used when the local user has released the call first.

• Remote: Used when the far-end party releases the call first.

• Unknown: Used when the call has partial information or is unable to gather enough information about the party who released the call. It could be because of situations like force lock or because of a session audit failure.

A unique identifier that is used to correlate CDRs and call legs with each other. This ID is used in conjunction with Local call ID to identity the local CDR of a call leg.

Each call consists of four UUIDs known as Local Session ID, Final Local Session ID, Remote Session ID and Final Remote Session ID.

• The Session ID comprises a Universally Unique Identifier (UUID) for each user-agent participating in a call.

• It can be used for end-to-end tracking of a SIP session in IP-based multimedia communication systems in compliance with RFC 7206 and draft-ietf-insipid-session-id-15.

• The Local SessionID is generated from the Originating user agent.

• The Remote SessionID is generated from the Terminating user agent.

• The Final Local Session ID has the value of the Local Session ID at the end of the call.

• The Final Remote Session ID has the value of the Remote Session ID at the end of the call.

A unique ID for this particular record. This can be used when processing records to aid in deduplication.

The time this report was created. Time is in UTC.

If present, this field's only reported in Originating records. Route group identifies the route group used for outbound calls routed via a route group to Premises-based PSTN or an on-prem deployment integrated with Webex Calling (dial plan or unknown extension).

The main number for the user's site where the call was made or received.

Site timezone is the offset in minutes from UTC time of the user's timezone.

A unique identifier for the site associated with the call. Unique across Cisco products.

This is the start time of the call, the answer time may be slightly after this. Time is in UTC.

If the call is TO or FROM a mobile phone using Webex Go, the Client type will show SIP, and Sub client type will show MOBILE_NETWORK.

Call identifier of a different call that was involved in the transfer. You can share this ID with Cisco TAC to help them pinpoint parties who were involved in the call transfer.

The user who made or received the call.

Represents the E.164 number of the user generating a CDR. If the user has no number assigned to them, then their extension will be displayed instead.

The type of user (user or workspace) that made or received the call. For example:

• AutomatedAttendantVideo: Automated Attendant Video IVR group service.

• Anchor: A Webex Calling user number made or received that is integrated with Webex Contact Center. An "anchor" is created to facilitate the call routing flow between WxC and WxCC.

• BroadworksAnywhere: Single number reach (Office anywhere) service.

• VoiceMailRetrieval: Voice Mail group service.

• LocalGateway: A local gateway-based user who made or received the call.

• HuntGroup: A hunt group based service.

• GroupPaging: One way call or group page made for target users.

• User: The direct user who made or received the call.

• VoiceMailGroup: Shared voicemail or inbound FAX destination for users.

• CallCenterStandard: A call queue-based service.

• VoiceXML: Call added back to the Route Point queue after script termination.

• RoutePoint: Route Point call to an agent (for an incoming call to the routing point).

• Place: A workspace-based user who made or received the call.

• VirtuaLline: Call made or received by a virtual line user using the Multi-line option in Webex Calling.

A unique identifier for the user associated with the call. This is a unique identifier across Cisco products.

Displays the name of the vendor from which one has purchased PSTN service for a specific country. For example:

• If purchased from Cisco PSTN, the field would display "Cisco Calling Plans"

• If purchased from Cisco Cloud Connected PSTN Partners, the field would list names such as "Tata", "IntelePeer", "KDDI", etc.

This field shows the regulated business entity registered to provide PSTN service in a particular country. It is exclusively used for Cisco Calling Plans.

• Note: The name of the regulated entity may vary within a region and across different regions.

This field displays the organization's Universal Unique Identifier (UUID) for Cisco Calling Plans, which is unique across various regions.

This field represents an immutable UUID, as defined by Cisco, for a PSTN provider partner. It uniquely identifies the entity that has provided PSTN service in that country.