EIR Logging

Logs are written in each STP MP's and DAMP’s file management area located at /var/TKLC/db/ filemgmt/Eir_logs/. The file name is comprised of "File creation date and time"-"File close date and time"_"MP host name". A sample EIR log file name would be EIR_28052018.070425-28052018.120427_so1mp1__logs.

vSTP EIR logs an entry when:

• Equipment status is found to be blacklisted or graylisted
• Equipment status is blacklisted, but allowed due to IMSI overide
• In error scenario, like the UDR connection is not available and the configured default response in error (EIR options table) is black or gray.

A configurable flag is provided in EirOptions table in case logging is needed for the whitelisted devices. Default value of the flag will be off.

vSTP EIR Logging

In case of vSTP EIR, Logs will be written in a file in csv format on each STP-MP file management area.

If IMSI is not present or EIR not able to decode IMSI in the message then IMSI field will be kept blank in the Eir logs.

The logs provides in csv format and include the following information:

• Date and time of the message

• The IMEI digits and the OPC from the CHECK_IMEI message.
• IMEI SV, if available
• The IMSI digits from the CHECK_IMEI message (if present)
• SCCP CgPA Digits from the source of query
• Device Status - Whether the IMEI was Whitelisted, Graylisted, or Blacklisted
• Reason - Blacklisted, but allowed due to IMSI override or IMEI Range Match

Diameter EIR Logging

In case of Diameter EIR, Logs will be written in a file in csv format on each STP-MP file management area.

If IMSI is not present or EIR not able to decode IMSI in the message then IMSI field will be kept blank in the Eir logs.

The logs provides in csv format and include the following information:

• Date and time of the message
• The IMEI digits from the ECR message
• IMEI SV, if available
• The IMSI digits from the ECR message (if present)
• Origin-host and origin-realm of the ECR message
• Device Status - Whether the IMEI was Whitelisted, Graylisted, or Blacklisted
• Reason - Blacklisted, but allowed due to IMSI override or IMEI Range Match

The MP copies the log file to the SOAM every hour to /var/TKLC/db/filemgmt/export/Eir_Log/Deir.

The MP copies the log file to the SOAM every hour to /var/TKLC/db/filemgmt/ export/Eir_Log/Vstp.

For example, if an MP server receives entry ID 1234 on July 15, 2003, at exactly 4:36 PM from a Service Module card provisioned at address 192.168.120.1 indicating that Blacklisted subscriber 9195551212 using handset 12345678901234 was detected, this entry is created:

20030715163600,192.168.61.1,1234,9195551212,12345678901234,0

Figure 3-1 Sample Log File