Getting Data In

Huawei CDR

lohans
Explorer

Is anyone indexing Huawei CDR's with Splunk?

The Huawei CDR's is in a encrypted / encoded format, is there a way to get these records into cleartext for indexing into Splunk?

Tags (1)
0 Karma

mgrnahid
New Member

Hi,
Can you please explain me, how to decode CDR file? I am waiting for your reaply

0 Karma

lohans
Explorer

Hi,

Yes we have managed to develop a custom decoder, although at this moment we don't decode all fields.
We just decode some of the fields we required.

Is your CDR files for a fixed or mobile networks?

0 Karma

lohans
Explorer

Hi,

Yes we have managed to develop a custom decoder, although at this moment we don't decode all fields.
We just decode some of the fields we required.

Is your CDR files for a fixed or mobile networks?

0 Karma

ryainad
Explorer

Hello, I have CDR file of huawei CSOFTX3000, and sample with first 50 decoded CDRs.
I need to decode it and convert to plain text. Have you managed it?

0 Karma

mgrnahid
New Member

Hello, I have CDR file of huawei CSOFTX3000, and sample with first 50 decoded CDRs.
I need to decode it and convert to plain text. Have you managed it?

0 Karma

mgrnahid
New Member

Hi,
Can you please explain me, how to decode CDR file? I am waiting for your reaply

0 Karma

lohans
Explorer

Hi,

Yes we have managed to develop a custom decoder, although at this moment we don't decode all fields.
We just decode some of the fields we required.

Is your CDR files for a fixed or mobile networks?

0 Karma

joonradley
Path Finder

Splunk basically needs readable text.

Decrypting and decoding data will have to happen with a scripted input or and external application that converts your data to text.

Decryption will be a challenge without vendor provided tool. (I doubt that this will be encrypted, most probably encoded)

Contact the hardware vendor to obtain documentation on the format of the encoded data and start from there.

0 Karma

joonradley
Path Finder

Yes, that the way we approach binary data formats.

0 Karma

lohans
Explorer

I know that! Hence why i asked the question if someone is already doing it and if so how.

You can get the CDRs from a mediation product that would have already normalized the data into plain text. (CSV, XLS etc)

Just thought someone might have solved this puzzle already without using a mediation product.

But by the look of things the only way forward is to use output from the mediation product with the data already normalized?

0 Karma
Get Updates on the Splunk Community!

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...