Hi,
I tried to run a report on multiple number from a specific field named "finalCalledPartyNumber" using the OR operator but I get results with other number as well. So I tried with bracket () but this time job failed, any idea how to do that ?
Here is my request:
finalCalledPartyNumber=331420 OR 331088 OR 331951 OR 331954 OR 331138 OR 331443 OR 333500 OR 331490 OR 332690 OR 332844 OR 332846 OR 332886 OR 331126 OR 332510 OR 333469 OR 332519 OR 331200 OR 331116 OR 332533 OR 331028 OR 333292 OR 331027 | eval Date=strftime(dateTimeConnect, "%H:%M:%S %d-%m-%Y") | top callingPartyNumber, finalCalledPartyNumber, Date by duration
But I got results with awkward numbers as "FinalCalledPartyNumber" as per below:
708907951 12:44:55 31-10-2017 ==> This number 708907951 is no where in my request
708960067 14:18:13 31-10-2017 ==> This number 708960067 is no where in my request
966131 11:21:54 31-10-2017 ==> This number 966131 is no where in my request
910723 13:10:30 31-10-2017 ==> This number 910723 is no where in my request
331490 09:18:49 31-10-2017 ==> This number 331490 is OK
708916453 13:37:38 31-10-2017 ==> This number 708916453 is no where in my request
331138 08:34:07 31-10-2017 ==> This number 331138 is OK
333500 08:48:14 31-10-2017 ==> This number 333500 is OK
Any ideas how to achieve this, to make sure I only got events only for what I requested ?
Many thanks
... View more