The Voice Server Distress sensor looks for calls that are not completed, which are going through a specific call server. The calls are either abandoned or they fail setup. The abandons and failures are weighted with the call volume to determine whether to flag a server. Even if the condition does not result from a security attack on the server, it is still a performance anomaly that warrants investigation.
Troubleshooting a Voice Server Distress Alert
The anomaly event identifies the IP address of a call server that has a large percentage of errored or abandoned calls. Use the UCM dashboard to look at the details of calls that are attempted, completed, and in error for the call server during the anomaly time frame.
|
Copyright © 2015 CA Technologies.
All rights reserved.
|
|