3 Logging and Visualization Feature Configuration
This chapter describes the procedures for configuring the Logging and Visualization feature in the EAGLE.
Introduction
This chapter identifies the prerequisites and the procedures for configuring the EAGLE Logging and Visualization feature.
Front Panel LED Operation
On the SLIC card, the Ethernet Interface 3 (mapped to port C) is used for visualization connectivity.
The following table captures the LED operations required for the Ethernet interfaces:
Table 3-1 Front Panel LED Operation
IP Interface Status | Signaling Link/connections Status on IP Port 3 (C) | Signaling connection | |
---|---|---|---|
PORT LED | LINK LED | ||
IP Port Not configured |
N/A
|
Off
|
Off
|
Card Inhibited | |||
Cable removed and/or not synced | N/A | Red | Red |
Sync | Not configured | Green | Red |
Sync and/or act-ip-lnk | Configured but Visualization TCP connection CLOSED (open=no) or disconnected. | Green | Red |
Visualization TCP Connection is ACTIVE (open=yes) and connected. | Green | Green | |
dact-ip-lnk | N/A | Green | Red |
Setting up a TCP Connection
EAGLE generates log messages and UIMs in JSON format. These JSON files are sent from SCCP and SFAPP servers to an external visualization server over a TCP connection.
Perform the following steps to set up a TCP connection:
- Configure the IP address at port
C.
Chg-ip-lnk:loc=<loc1>:port=C:ipaddr= <IP address of port C>:submask=<subnetmask>:duplex=full:speed=1000
- Configure the default router to change the IP card (applicable only in case of a
public IP address).
chg-ip-card:loc=<loc1>:defrouter=<defrouter IP>
- Assign a hostname to the IP address of port C to configure the local host (in this
case, the local hostname is
hsccp).
ent-ip-host:host=hsccp:ipaddr=<IP address of port C>
- Assign a hostname to the IP address of the visualization server to configure the
remote host (in this case, the remote hostname is
Viz).
ent-ip-host:host=Viz:ipaddr=<IP address of viz server>:type=remote
- Assign a name to configure the TCP connection (in this case, the connection name is
conn1).
ent-ip-conn:prot=tcp:lhost=hsccp:lport=<local port>:rhost=Viz:rport=<remote port>:cname=conn1
- Change the IP connection and open the newly configured
connection.
chg-ip-conn:cname=conn1:open=yes
Log Messages and UIMs in JSON format
After the connection successfully gets set up, EAGLE starts transferring JSON files to external visualization server.
{
"@timestamp": "2021-10-14T14:31:29.047Z",
"CDNI": "0",
"CDTT": "150",
"CDNP": "6",
"DPC": "7-030-7",
"CDSSN": "22",
"CDRI": "0",
"CGRI": "1",
"CGNAI": "",
"CARD": "1303",
"CDADDR": "1bb00002970025349819",
"CGNI": "0",
"CGPC": "3-110-5",
"CGNP": "",
"CGSSN": "22",
"CGTT": "",
"CGADDR": "",
"GTTSET": "",
"OPC": "3-110-5",
"CDPC": "",
"UIM_TEXT": "NP Circular Route detected",
"SIO": "3",
"CLLI": "tklc1170501",
"UIM": "1256",
"CDNAI": "1",
"EC": "",
"LSET": "ls1216i13"
}
{
"@timestamp": "2021-11-29T17:09:11.545Z",
"IMSI": "22345670",
"OPCODE": "updateLocation",
"CDTT": "31",
"CDLOC": "-7.92,12.57",
"CGNAI": "",
"CAT": "cat3.2",
"CLLI": "tklc1181001",
"ASUBTYPE": [ "profileDisclosure", "callRedirection", "callInterception", "smInterception", "servUnavail"
],
"DISC": "no",
"CDADDR": "22345670",
"LSET": "ls1208",
"ATYPE": [ "intercept", "fraud"
],
"CDCN": "Mali",
"OPC": "7-080-7",
"CGTT": "30",
"CGADDR": "9899335999",
"CDNP": "",
"CDNAI": "",
"DPC": "2-002-2",
"CGCN": "Iran",
"ClSF": "None",
"MSISDN": "",
"CGLOC": "51.63,36.13",
"CGNP": "" }