Charts: Difference between revisions

From VoIPmonitor.org
(Review: opravy hierarchie nadpisů, formátování seznamů, zkrácení AI Summary)
(Review: opravy formátování - konzistentní odsazení odrážek, oprava wiki syntaxe pro kurzívu a tučné písmo)
Line 83: Line 83:
* Time interval
* Time interval
[[File:charts-timeinterval.png]]
[[File:charts-timeinterval.png]]
* Time axes is density on the X axis.
* Time axis density on the X axis.


[[File:charts-density.png]]
[[File:charts-density.png]]
Line 193: Line 193:
*Set axis side (Left or Right) as needed
*Set axis side (Left or Right) as needed


# '''Apply the IP Group as a Filter:**
# '''Apply the IP Group as a Filter:'''
*Go to the Filters - common tab
*Go to the Filters - common tab
*In the "Group Filters" section, select your IP group from the "Called Groups" or "Caller Groups" dropdown
*In the "Group Filters" section, select your IP group from the "Called Groups" or "Caller Groups" dropdown
Line 266: Line 266:
=== Limitations ===
=== Limitations ===


*This approach provides a visual trend comparison rather than an exact percentage calculation. The chart displays raw call counts, not calculated percentages.*
''This approach provides a visual trend comparison rather than an exact percentage calculation. The chart displays raw call counts, not calculated percentages.''


*If you need exact percentage values over time, you must query the database directly using SQL.*
''If you need exact percentage values over time, you must query the database directly using SQL.''


=== Method 2: Display Multiple Routes on Same Chart ===
=== Method 2: Display Multiple Routes on Same Chart ===
Line 308: Line 308:
When viewing SIP response codes in charts or dashboard graphs, the colors are '''not fixed''' and may rotate or change over time.
When viewing SIP response codes in charts or dashboard graphs, the colors are '''not fixed''' and may rotate or change over time.


*'''Current behavior:''' The dominant (most frequent) SIP response code automatically receives the 'green' color, while other codes get different colors. If 200 OK is the dominant code today, it will be green. If 404 Not Found becomes dominant tomorrow, 404 will become green and 200 OK will shift to a different color.
* '''Current behavior:''' The dominant (most frequent) SIP response code automatically receives the 'green' color, while other codes get different colors. If 200 OK is the dominant code today, it will be green. If 404 Not Found becomes dominant tomorrow, 404 will become green and 200 OK will shift to a different color.


*'''Impact on monitoring:''' This color rotation makes it difficult to interpret trends consistently over time, as you cannot rely on a specific color always representing a specific SIP response code.
* '''Impact on monitoring:''' This color rotation makes it difficult to interpret trends consistently over time, as you cannot rely on a specific color always representing a specific SIP response code.


*'''Status:''' This is a known limitation. A feature request (VG-3031) has been created to make colors for response codes settable/configurable in a future release.
* '''Status:''' This is a known limitation. A feature request (VG-3031) has been created to make colors for response codes settable/configurable in a future release.


*'''Workaround:''' There is currently no workaround to lock colors to specific SIP response codes. You must wait for a future release where this feature will be implemented.
* '''Workaround:''' There is currently no workaround to lock colors to specific SIP response codes. You must wait for a future release where this feature will be implemented.


=== Why do flow diagrams and pie charts show different SIP response percentages? ===
=== Why do flow diagrams and pie charts show different SIP response percentages? ===
Line 324: Line 324:
The most common cause is that the charts are actually configured for slightly different time ranges.
The most common cause is that the charts are actually configured for slightly different time ranges.


*'''Resolution:''' Ensure both the pie chart (CDR Dashboard) and the flow diagram (Charts module) are configured with exactly the same time interval. Check the time filters in both views carefully - the Dashboard pie chart uses the CDR view's time range, while Charts has its own independent "Date range" settings.
* '''Resolution:''' Ensure both the pie chart (CDR Dashboard) and the flow diagram (Charts module) are configured with exactly the same time interval. Check the time filters in both views carefully - the Dashboard pie chart uses the CDR view's time range, while Charts has its own independent "Date range" settings.


==== Flow Diagrams Near Current Time Show Lower 200 OK ====
==== Flow Diagrams Near Current Time Show Lower 200 OK ====
Line 332: Line 332:
This occurs because of how VoIPmonitor captures and records calls:
This occurs because of how VoIPmonitor captures and records calls:


*'''Calls in progress:''' Calls that are still active when you query the data have not yet completed their SIP signaling and cannot be classified with a final response code. They are excluded from flow diagram calculations.
* '''Calls in progress:''' Calls that are still active when you query the data have not yet completed their SIP signaling and cannot be classified with a final response code. They are excluded from flow diagram calculations.
*'''Database latency:''' Even after calls complete, there is a delay before they are processed, saved to the database, and become available for chart queries. This negative caching period means that very recent calls may not be included in flow diagrams yet.
* '''Database latency:''' Even after calls complete, there is a delay before they are processed, saved to the database, and become available for chart queries. This negative caching period means that very recent calls may not be included in flow diagrams yet.
*'''Result:''' The flow diagram shows the percentage of completed/categorized calls, which skews toward lower success rates for periods close to "now" because many 200 OK calls are still in progress or not yet written to the database.
* '''Result:''' The flow diagram shows the percentage of completed/categorized calls, which skews toward lower success rates for periods close to "now" because many 200 OK calls are still in progress or not yet written to the database.


*'''Resolution:''' For accurate, consistent comparisons between flow diagrams and pie charts, use a time period that is at least several minutes old (older than your typical call duration plus database write latency). Historical time periods will show consistent percentages across both chart types.
* '''Resolution:''' For accurate, consistent comparisons between flow diagrams and pie charts, use a time period that is at least several minutes old (older than your typical call duration plus database write latency). Historical time periods will show consistent percentages across both chart types.


=== Why do concurrent calls from Tools differ from the Concurrent Calls chart? ===
=== Why do concurrent calls from Tools differ from the Concurrent Calls chart? ===
Line 394: Line 394:
A concurrent call alert may trigger only once even during a long traffic spike. This is by design:
A concurrent call alert may trigger only once even during a long traffic spike. This is by design:


*'''Edge triggering:''' Alerts fire when the metric crosses the configured threshold (e.g., going from 99 calls to 132 calls that exceeds a 100-call threshold)
* '''Edge triggering:''' Alerts fire when the metric crosses the configured threshold (e.g., going from 99 calls to 132 calls that exceeds a 100-call threshold)
*'''Sustained state:''' Once the condition is met (calls greater than threshold), the alert remains in a triggered state but does not send a new notification for every additional call
* '''Sustained state:''' Once the condition is met (calls greater than threshold), the alert remains in a triggered state but does not send a new notification for every additional call
*'''Reset condition:''' The alert will trigger again only if concurrency drops below the threshold and then crosses it again, or if configured with recurring intervals (e.g., "alert every 5 minutes while condition is met")
* '''Reset condition:''' The alert will trigger again only if concurrency drops below the threshold and then crosses it again, or if configured with recurring intervals (e.g., "alert every 5 minutes while condition is met")


A single alert notification indicates a sustained violation over time, not a one-time momentary spike.
A single alert notification indicates a sustained violation over time, not a one-time momentary spike.
Line 475: Line 475:
Before assuming this is a performance issue, consider these potential causes:
Before assuming this is a performance issue, consider these potential causes:


*'''Special characters in SIP Agent strings:''' Certain characters in User-Agent headers may interfere with filter parsing in charts, even though they work in the CDR list search.
* '''Special characters in SIP Agent strings:''' Certain characters in User-Agent headers may interfere with filter parsing in charts, even though they work in the CDR list search.


*'''Filter syntax differences:''' Wildcard patterns (<code>%</code>) may behave differently in chart queries compared to CDR list queries.
* '''Filter syntax differences:''' Wildcard patterns (<code>%</code>) may behave differently in chart queries compared to CDR list queries.


*'''Dashboard chart configuration:''' The specific chart or panel may have different time ranges, data sources, or filter settings applied.
* '''Dashboard chart configuration:''' The specific chart or panel may have different time ranges, data sources, or filter settings applied.


*'''CDR Summary table inconsistencies:''' If CDR Summary is enabled, there may be synchronization issues between the summary table and detailed CDR data for certain filter patterns.
* '''CDR Summary table inconsistencies:''' If CDR Summary is enabled, there may be synchronization issues between the summary table and detailed CDR data for certain filter patterns.


==== Diagnostic Data Collection ====
==== Diagnostic Data Collection ====
Line 499: Line 499:
Try the following to isolate the issue:
Try the following to isolate the issue:


*'''Create a new simple chart with only the problematic filter:''' If the new chart works, the original chart may have conflicting filters or configuration issues.
* '''Create a new simple chart with only the problematic filter:''' If the new chart works, the original chart may have conflicting filters or configuration issues.


*'''Test with exact match instead of wildcard:''' If <code>Rebtel%Android%</code> fails, try an exact match like <code>Rebtel-Android-1.0</code> to determine if wildcards are the problem.
* '''Test with exact match instead of wildcard:''' If <code>Rebtel%Android%</code> fails, try an exact match like <code>Rebtel-Android-1.0</code> to determine if wildcards are the problem.


*'''Check for special characters:''' If the SIP Agent string contains parentheses, quotes, or other special characters, try escaping them or using a different approach.
* '''Check for special characters:''' If the SIP Agent string contains parentheses, quotes, or other special characters, try escaping them or using a different approach.


*'''Verify CDR Summary status:''' If using CDR Summary, test with <code>disable_cdr_summary = yes</code> in <code>voipmonitor.conf</code> to check if the summary table is causing issues.
* '''Verify CDR Summary status:''' If using CDR Summary, test with <code>disable_cdr_summary = yes</code> in <code>voipmonitor.conf</code> to check if the summary table is causing issues.


*'''Compare data volumes:''' Check if the Android filter matches significantly more records than the iOS filter (look at the "X results found" counter in CDR list). If the difference is massive, performance may indeed be the issue.
* '''Compare data volumes:''' Check if the Android filter matches significantly more records than the iOS filter (look at the "X results found" counter in CDR list). If the difference is massive, performance may indeed be the issue.


=== Troubleshooting Chart Timeout Issues ===
=== Troubleshooting Chart Timeout Issues ===

Revision as of 18:01, 6 January 2026

Charts

Charts are used to plot various data sources like number of concurrent calls or quality of calls over time. Data sources can be combined to one chart allowing the viewer to see the correlation of desired data sources like SIP 4XX/5XX responses on ASR. The graph itself is interactive – clicking on a particular legend hides the datasource. Hovering on a datasource highlights it and shows the local value.


Charts are also present in the CDR window in the right mini-window sharing the same functionality with only difference that in CDR section the graph takes data from the current filter.

Chart Creation Workflow

Add chart

To create new graph click on the + button.

Chart configuration

Chart configuration contains three tabs at the top – base chart data, filters – common and filters – rtp. The filters tab is used to filter data sources by various criteria – for detailed description please refer to CDR chapter.

The chart configuration panel is divided to three sections. Date range, series and description.



Templates


template field contains predefined chart configurations and custom templates which you can create / modify. To create new template - write name of it to description title field which shows save template button next to templates combo box.

Viewing License Usage Per Instance (Sensor)

You can track license utilization (maximum, minimum, average concurrent calls) for specific instances/sensors by combining CDR filtering with chart templates. This helps identify which sensors contribute the most to your overall license usage.

Step-by-Step: Track License Calls for a Specific Sensor

  1. Navigate to CDR View
  • Go to GUI > CDR
  1. Apply Filter for Specific Instance
  • In the CDR filter panel, select your sensor using the id_sensor filter
  • Apply the filter to display only CDRs from that specific instance
  1. Open Charts Panel
  • On the right-hand side of the CDR view, click the Charts button to expand the charts panel
  1. Create License Calls Chart
  • Click the + button to create a new chart
  • Select the Number of license calls template from the template dropdown
  • The chart will automatically use your current CDR filter (the specific sensor you selected)
  1. View Results
  • The chart displays the channel count (license utilization) over time for that specific sensor
  • Hover over data points to see exact values

Understanding Per-Instance vs Total License Usage

Important Note: CDR merging occurs before the license channel count is calculated at the GUI level. Therefore, the total license usage across all instances may be less than the sum of individual instance counts if calls traverse multiple instances (e.g., a call goes through Sensor A and Sensor B). This is because the GUI deduplicates CDRs based on matching the last 6 digits of caller/called numbers.

This means:

  • Per-instance charts show how many channels each sensor contributes to the pool
  • Total license usage may be lower than the sum of all instances due to deduplication
  • This is expected behavior in distributed/geo-redundant deployments


Date range

  • Time interval

  • Time axis density on the X axis.


Series

Series section contains data sources for the charts.

Series Column

Series column chooses which data source will be plotted.

  • number of calls - shows min/max/avg simultaneous calls distribution and total calls distribution
  • MOS / jitter / delay / packet loss - shows RTP statistics
  • RTCP - shows RTCP protocol values
  • ACD, ASR, PDD, SIP responses - shows signalization related values
  • codecs - shows codec distribution
  • CallPerSec - shows Calls Per Second (CPS) rate over time. Use the CallPerSec template for quick CPS visualization.
  • ACD average shows averaged call duration for all calls which started in the given interval.
  • ACD immediate shows averaged call duration for all calls which are ongoing in the given interval. Thus this chart will show higher ACD for short intervals.

Param

Param column specifies SIP response code.


Axis Side

Axis side is used to assign data source to the left Y axis or to the right Y axis.


Primary

Primary checkbox is used when multiple datasources are drawn on the left or right Y axis. The primary-checked datasource fills the whole Y axis and non-primary datasources use that scale. Example:

Type

Type of graph.

Line

Decoration for line type chart.

Color

Color of chart.

Fill / Markers / Smooth

  • Fill - fills area below the line type chart
  • Markers - plots dots at line points
  • Smooth - draws smoothed lines instead of straight lines between points

Description

Description names graph, axis and sets legend position (top/left/right/bottom or no legend).

Setting your own title will allow to save a created graph for repetitive use. Once the title is filled or changed, the save button will appear next to type chart.

Using Groups to Filter Charts by Provider

IP groups allow you to efficiently filter charts by specific providers or destinations without manually configuring individual IP addresses for each chart. This is the recommended approach for monitoring multiple providers.

Step-by-Step: Charting Jitter for a Specific Provider

  1. Create IP Groups:
  • Navigate to GUI → Groups → IPs
  • Click "New group"
  • Enter a group name for your provider (e.g., "Provider A Trunk")
  • Add the provider's IP addresses or CIDR ranges, one per line
  • Save the group

Repeat for each provider you want to monitor.

  1. Create the Chart:
  • Navigate to CDR tab in the GUI
  • Click the Charts button
  • Click the + button to create a new graph
  1. Configure the Data Source:
  • In the Series table, select "MOS / jitter / delay / packet loss" as the series type
  • Set axis side (Left or Right) as needed
  1. Apply the IP Group as a Filter:
  • Go to the Filters - common tab
  • In the "Group Filters" section, select your IP group from the "Called Groups" or "Caller Groups" dropdown
  1. Optional: Filter for Successful Calls:
  • In the Filters - common tab, add a filter for "Last SIP response = 200" to chart only successful calls
  1. Optional: Compare Multiple Providers:**
  • Add additional series to the same chart
  • For each series, apply a different IP group filter
  • Use the tools icon (settings icon) next to the filter to name each series
  • The names will appear in the chart legend for easy identification

This approach allows you to monitor jitter, MOS, delay, and packet loss across multiple providers on a single chart or create separate charts for each provider.

Filters - common

Filters CDR data in the same way as CDR filter formular except date range which is in the first base chart data section.

Filters - RTP

Filters CDR data in the same way as CDR filter formular

Creating Percentage Comparisons for Custom SIP Headers

While the CDR Dashboard panels support grouping by specific fields (Last SIP Response, Codec, SIP IP, or predefined IP Groups), custom SIP headers cannot be used directly as a "Group By" dimension. However, you can create percentage/distribution comparisons for custom headers (such as x-route for carrier routing analysis) using the Charts module with multiple series and wildcard filtering.

Prerequisites: Configure Custom Header Capture

Before creating charts with custom headers, you must ensure the header is captured and stored in CDR data:

1. Configure the sniffer to capture the header in voipmonitor.conf:

custom_headers = x-route

2. Enable the header in GUI Settings for CDR display:

  * Navigate to Settings > CDR Custom Headers
  * Select your custom header (e.g., x-route)
  * Check "Show as Column" to make the value visible in the CDR list

Method 1: Compare Specific Route vs All Traffic (Recommended)

To visualize how a specific route contributes as a percentage of total traffic over time, create a chart with two series:

1. Navigate to GUI > CDR > Charts 2. Click '+ to create a new chart 3. Configure two series:

  Series 1: All Traffic with Custom Header
  * Series type: number of calls
  * Go to Filters - common tab
  * Filter by your custom header using wildcard: x-route = %
  * This captures all CDRs that have any value for this header
  Series 2: Traffic for Specific Route
  * Add a second series with type: number of calls
  * Go to Filters - common tab
  * Filter by the specific route value: x-route = ATT (or your route identifier)
  * Use the tools icon (settings) next to the series to name it "Route: ATT"

4. Set the date range and save the chart

The resulting chart shows two lines:

  • The top line represents all traffic with the custom header
  • The lower line represents traffic for the specific route
  • The visual gap between the lines shows the relative contribution (not an exact percentage calculated by the chart, but a visual comparison)

Limitations

This approach provides a visual trend comparison rather than an exact percentage calculation. The chart displays raw call counts, not calculated percentages.

If you need exact percentage values over time, you must query the database directly using SQL.

Method 2: Display Multiple Routes on Same Chart

For comparing multiple routes on a single chart:

1. Create a chart with number of calls as the series type 2. Add multiple series, one for each route:

  * Series 1: Filter x-route = ATT (name it "Route: ATT")
  * Series 2: Filter x-route = Vodafone (name it "Route: Vodafone")
  * Series 3: Filter x-route = Tele2 (name it "Route: Tele2")

3. Each series will appear as a separate line on the chart

Be aware: Data points with identical values from different series may overlap, making it difficult to distinguish between routes when they have similar call volumes. For clear visualization, consider creating separate charts for each route or use Method 1 to compare individual routes against total traffic.

For Exact Percentage Analysis

If you need precise percentage distributions (e.g., "ATT = 35%, Vodafone = 25%, Tele2 = 40%"), use direct SQL queries on the database:

-- Count CDRs per custom header value
SELECT
    custom_header_value AS route,
    COUNT(*) AS call_count,
    ROUND(COUNT(*) * 100.0 / SUM(COUNT(*)) OVER(), 2) AS percentage
FROM cdr_custom_headers
WHERE cdr_custom_header_field = 'x-route'
    AND calldate BETWEEN '2025-01-01 00:00:00' AND '2025-01-01 23:59:59'
GROUP BY custom_header_value
ORDER BY call_count DESC;

This requires joining with the cdr_next_X tables to match CDR IDs and filtering by your desired time range.

Common Issues

Why do SIP response codes change colors in dashboard graphs?

When viewing SIP response codes in charts or dashboard graphs, the colors are not fixed and may rotate or change over time.

  • Current behavior: The dominant (most frequent) SIP response code automatically receives the 'green' color, while other codes get different colors. If 200 OK is the dominant code today, it will be green. If 404 Not Found becomes dominant tomorrow, 404 will become green and 200 OK will shift to a different color.
  • Impact on monitoring: This color rotation makes it difficult to interpret trends consistently over time, as you cannot rely on a specific color always representing a specific SIP response code.
  • Status: This is a known limitation. A feature request (VG-3031) has been created to make colors for response codes settable/configurable in a future release.
  • Workaround: There is currently no workaround to lock colors to specific SIP response codes. You must wait for a future release where this feature will be implemented.

Why do flow diagrams and pie charts show different SIP response percentages?

Flow diagrams (time-series charts in the Charts module) and pie charts (CDR dashboard sections) may show different percentages for the same SIP response codes even when they appear to cover the same time period. This typically has two causes:

Different Time Intervals

The most common cause is that the charts are actually configured for slightly different time ranges.

  • Resolution: Ensure both the pie chart (CDR Dashboard) and the flow diagram (Charts module) are configured with exactly the same time interval. Check the time filters in both views carefully - the Dashboard pie chart uses the CDR view's time range, while Charts has its own independent "Date range" settings.

Flow Diagrams Near Current Time Show Lower 200 OK

For time periods very close to the current time, flow diagrams will naturally show a lower percentage of 200 OK responses compared to pie charts, even with identical time intervals.

This occurs because of how VoIPmonitor captures and records calls:

  • Calls in progress: Calls that are still active when you query the data have not yet completed their SIP signaling and cannot be classified with a final response code. They are excluded from flow diagram calculations.
  • Database latency: Even after calls complete, there is a delay before they are processed, saved to the database, and become available for chart queries. This negative caching period means that very recent calls may not be included in flow diagrams yet.
  • Result: The flow diagram shows the percentage of completed/categorized calls, which skews toward lower success rates for periods close to "now" because many 200 OK calls are still in progress or not yet written to the database.
  • Resolution: For accurate, consistent comparisons between flow diagrams and pie charts, use a time period that is at least several minutes old (older than your typical call duration plus database write latency). Historical time periods will show consistent percentages across both chart types.

Why do concurrent calls from Tools differ from the Concurrent Calls chart?

You may notice that the "Concurrent Calls Stats" report in Tools and the "Concurrent Calls" chart display different numbers for the same time period. This is expected behavior due to differences in how the two features count and display calls.

Understanding the Counting Methods

  • Tools Concurrent Calls Stats: Available from GUI > Tools > Concurrent Calls Stats, this report is designed for GUI licensing compliance. It displays maximum concurrent call statistics for the last 14 days, averaged over 60-minute windows. This report counts all CDR legs separately (for example, if you have 100 calls with 2 legs each, it will show 200). This count includes all CDR records without applying any call merging or correlation logic. The tools report applies primarily to GUI licensing - if you exceed your licensed concurrent call limit, the GUI will warn or block access after 14 days.
  • Concurrent Calls Chart: Available from GUI > CDR > Charts, by default this chart type uses the standard "concurrent calls" data source which also counts every CDR leg separately, matching the behavior of alerts. If you are seeing different values between Tools and charts, verify which chart series type you have selected. Some chart variations may apply call merging logic (such as matching the last 6 digits of caller/called numbers within a 10-second window) to combine correlated legs into single end-to-end calls in the visualization.

Identifying the Right Data Source

  • For license planning or capacity planning: Use Tools > Concurrent Calls Stats for license compliance checks. Use Charts > "concurrent calls - license chart" series type if you want to see the number of end-to-end phone conversations (merged legs) rather than CDR records.
  • For alert troubleshooting: Create a standard "concurrent calls" chart (not the license chart type) with the same filters as your alert. This will show exactly what the alert monitoring engine evaluates.
  • For troubleshooting discrepancies: Check the Series column in your chart configuration. Different series types have different counting methods. If you need to match the Tools report count, ensure you are using a chart series that does not apply leg merging.

The chart configuration also offers more filtering options (such as per-sensor filtering or custom SIP header filters) compared to the Tools report, which can result in different filtered results even if the underlying counting method is the same.

Why do concurrent call alerts differ from "concurrent calls - license chart"?

You may notice that concurrent call alerts show different values than call graph reports, even when using the same filters. This is because alerts and charts count concurrent calls differently.

Understanding the Counting Methods

  • Alerts count every CDR leg separately: Concurrent call alerts monitor and count each individual CDR leg recorded by VoIPmonitor. If a single end-to-end call creates multiple CDR records (for example, when acting as a proxy and different call legs involve different IP addresses), each leg contributes separately to the concurrent call count in the alert.
  • License chart merges correlated call legs: The "concurrent calls - license chart" report type intelligently merges multiple CDR legs that belong to the same end-to-end call. This merged count represents the actual number of concurrent phone calls rather than the number of CDR records.

This explains why an alert might report 132 concurrent calls while a "concurrent calls - license chart" shows a different number like 650 - the alert counted individual CDR legs, while the license chart merged correlated legs into end-to-end calls.

Generating Reports That Match Alert Behavior

If you want a chart that accurately reflects what concurrent call alerts monitor (i.e., counting every CDR leg separately):

1. Do not use the "license chart" type 2. Use the standard "concurrent calls" chart instead 3. Apply the same filters that your alert uses

The standard "concurrent calls" chart counts CDR legs separately, matching how alerts evaluate concurrency.

Proxy Use Case: Separating Calls by Carrier

When acting as a proxy where multiple carriers route through your system, you may want to monitor concurrent calls per carrier rather than total system concurrency. In this scenario:

  • Alerts counting individual CDR legs is usually desired behavior - you want to know when a specific carrier (identified by IP or SIP headers) exceeds a threshold
  • Create separate alerts and charts for each carrier using filters:
 ** IP filters: Filter by destination IP to track a specific carrier network
 ** Custom SIP headers: Use Groups or capture custom headers to filter by carrier identification information
 ** Apply the same filters to both the alert and the chart for accurate comparison

Why Alerts Triggered Only Once

A concurrent call alert may trigger only once even during a long traffic spike. This is by design:

  • Edge triggering: Alerts fire when the metric crosses the configured threshold (e.g., going from 99 calls to 132 calls that exceeds a 100-call threshold)
  • Sustained state: Once the condition is met (calls greater than threshold), the alert remains in a triggered state but does not send a new notification for every additional call
  • Reset condition: The alert will trigger again only if concurrency drops below the threshold and then crosses it again, or if configured with recurring intervals (e.g., "alert every 5 minutes while condition is met")

A single alert notification indicates a sustained violation over time, not a one-time momentary spike.

Verifying CDR Leg Behavior

To understand how your specific calls are being recorded as CDR legs:

1. Navigate to GUI > CDR > Browse 2. Search for a specific phone call using caller/called number or time range 3. Review the results - if a single end-to-end call appears as multiple CDR records, you are seeing the multi-leg scenario

Each separate CDR record will be counted independently in concurrent call alerts, while correlation mechanisms merge them in charts that support leg merging.

Troubleshooting Sudden Unexplained Increase in Reported Calls

If you observe a sudden, unexplained increase in reported calls that does not match your actual network traffic (e.g., no increase in voice conversations), this may indicate a probe software version change that affected CDR merging or license counting.

Step 1: Check System Logs for Probe Version Changes

When investigating when the issue started, check system logs for clues about probe software updates or configuration changes.

# Check syslog for voipmonitor messages around the time the issue started
grep voipmonitor /var/log/syslog | less

# On some systems, logs may be in /var/log/messages
grep voipmonitor /var/log/messages | less

Look for:

  • Probe startup/restart messages around the time the issue began
  • Version numbers indicating a software upgrade
  • Any configuration changes that might affect CDR processing

Step 2: Use Concurrent Licensed Calls Chart with Sensor Filtering

Use the "concurrent calls - license chart" report type to isolate which probe is reporting the increased call count.

1. Navigate to GUI > Charts 2. Click the + button to create a new chart 3. In the Series section, select:

  * series: concurrent calls - license chart

4. In the Filters - common tab, apply sensor filters:

  * Add a series for each sensor using the Filter by id_sensor option
  * Or create separate charts, one per sensor, to compare call counts

5. Set the date range to cover the period before and after the issue started

This allows you to:

  • Identify which specific probe is causing the spike
  • Determine if only one probe is affected or if multiple probes show the issue
  • Correlate the timing with any probe version changes found in system logs

Step 3: Investigate CDR Merging Changes via SIP History

Changes in CDR merging behavior can affect license counting after probe upgrades. VoIPmonitor versions may change how correlated call legs are merged, which impacts the "concurrent calls - license chart" calculation.

To investigate CDR merging issues:

1. Navigate to a specific CDR in GUI > CDR > Browse 2. Open the SIP history for affected calls 3. Compare call legs from the problematic time period to determine:

  * Are multiple call legs being counted separately instead of merged?
  * Has the correlation logic changed after a probe upgrade?
  * Are legs that were previously merged now being counted individually?

This investigation helps determine if the call count increase is due to:

  • A software change in how CDR legs are merged for license counting
  • Configuration differences between probes
  • Network topology changes affecting call correlation

Filter Works in CDR List but Not in Dashboard Chart

If you notice that a filter (e.g., SIP Agent = Rebtel%Android%) works correctly in the CDR list but returns no data in a dashboard chart, while a similar filter (e.g., SIP Agent = Rebtel%iOS%) works in both places, this may indicate an issue beyond simple performance problems.

Possible Causes

Before assuming this is a performance issue, consider these potential causes:

  • Special characters in SIP Agent strings: Certain characters in User-Agent headers may interfere with filter parsing in charts, even though they work in the CDR list search.
  • Filter syntax differences: Wildcard patterns (%) may behave differently in chart queries compared to CDR list queries.
  • Dashboard chart configuration: The specific chart or panel may have different time ranges, data sources, or filter settings applied.
  • CDR Summary table inconsistencies: If CDR Summary is enabled, there may be synchronization issues between the summary table and detailed CDR data for certain filter patterns.

Diagnostic Data Collection

If basic troubleshooting (simplifying the filter, verifying time ranges, checking for special characters) does not resolve the issue, collect the following diagnostic data for support team analysis:

1. Sample SIP pcap file: Provide a SIP packet capture (pcap) of a call that should be included in the chart based on your filter but is not appearing.

2. GUI configuration backup: Backup your GUI configuration via GUI > Tools > Backup & Restore > backup GUI: configuration tables to provide complete settings for the dashboard and chart.

3. Chart details: Specify the exact name of the dashboard panel and the name of the chart where the issue occurs.

4. Filter details: Provide the exact filter string that works in CDR list but not in the chart, along with any variations you have tested.

Troubleshooting Steps Before Contacting Support

Try the following to isolate the issue:

  • Create a new simple chart with only the problematic filter: If the new chart works, the original chart may have conflicting filters or configuration issues.
  • Test with exact match instead of wildcard: If Rebtel%Android% fails, try an exact match like Rebtel-Android-1.0 to determine if wildcards are the problem.
  • Check for special characters: If the SIP Agent string contains parentheses, quotes, or other special characters, try escaping them or using a different approach.
  • Verify CDR Summary status: If using CDR Summary, test with disable_cdr_summary = yes in voipmonitor.conf to check if the summary table is causing issues.
  • Compare data volumes: Check if the Android filter matches significantly more records than the iOS filter (look at the "X results found" counter in CDR list). If the difference is massive, performance may indeed be the issue.

Troubleshooting Chart Timeout Issues

When generating charts for date ranges longer than a single day, you may experience timeouts. This typically occurs when the database query takes too long to execute due to insufficient buffering for large data sets.

Solution: Increase InnoDB Buffer Pool Size

The primary solution is to increase the innodb_buffer_pool_size MySQL configuration parameter to allocate more RAM for caching data. This allows the database to keep more data in memory, dramatically reducing disk I/O for chart queries.

To configure innodb_buffer_pool_size:

[mysqld]
# Allocate 70-80% of available RAM for buffer pool
innodb_buffer_pool_size = 16G

After modifying MySQL configuration, restart the service:

sudo systemctl restart mysql

For detailed MySQL performance tuning guidance, see High-Performance_VoIPmonitor_and_MySQL_Setup_Manual.

Workaround: Generate Charts During Off-Peak Hours

As a temporary workaround, generate challenging charts (multi-day ranges) during off-peak hours when database load from real-time CDR processing is lower (e.g., nighttime or weekends).

Workaround: Schedule Chart Generation via Daily Reports

Instead of manually generating large charts, use the Daily Email Reports feature to schedule chart generation and receive results via email:

  1. Navigate to GUI > Reports > Configure Daily Reports
  2. Select Daily Charts Report as the report type
  3. Configure the date range, filters, and schedule (e.g., run at 2:00 AM)
  4. Add recipient email addresses to receive the generated charts

This approach generates charts during low-traffic periods automatically, avoiding timeout issues during peak usage hours.

AI Summary for RAG

Summary: Charts in VoIPmonitor visualize call data over time with interactive graphs. Create charts by clicking + and configuring date range, series (data sources like number of calls, MOS/jitter/delay/packet loss, RTCP, ACD/ASR/PDD, codecs, CallPerSec), and description. Templates provide quick configurations. For license usage per sensor: CDR filter by id_sensor → Charts → "Number of license calls" template. Note: total license usage may be less than sum of individual instances due to CDR deduplication based on last 6 digits of caller/called numbers. Use IP groups (GUI → Groups → IPs) to filter charts by provider. Common issues: (1) SIP response code colors are not fixed - dominant code gets green, colors rotate (no workaround, VG-3031 feature request). (2) Flow diagrams vs pie charts show different percentages near current time due to in-progress calls and DB latency. (3) Tools Concurrent Calls Stats vs Concurrent Calls chart differ - standard chart counts CDR legs separately (like alerts), "license chart" merges legs. (4) Chart timeouts for multi-day ranges - increase innodb_buffer_pool_size or use Daily Reports. (5) Filter works in CDR list but not chart - check special characters, wildcards, CDR Summary.

Keywords: charts, graphs, visualization, number of calls, CallPerSec, CPS, MOS, jitter, delay, packet loss, RTCP, ACD, ASR, PDD, codecs, templates, filters, IP groups, provider filtering, license usage per sensor, id_sensor filter, concurrent calls, license chart, CDR leg, color rotation, chart timeout, innodb_buffer_pool_size, custom SIP header, x-route, wildcard filter

Key Questions:

  • How to create charts in VoIPmonitor GUI?
  • How to view Calls Per Second (CPS) in a graph?
  • How to monitor MOS, jitter, delay, and packet loss over time?
  • How to identify license usage per instance/sensor?
  • How to use IP groups to filter charts by provider?
  • Why do SIP response code colors change in charts?
  • Why do flow diagrams and pie charts show different SIP response percentages?
  • Why do concurrent calls in Tools differ from Concurrent Calls chart?
  • What is the difference between "concurrent calls" and "concurrent calls - license chart"?
  • Why do charts timeout for date ranges longer than a day?
  • Why does a filter work in CDR list but not in dashboard chart?
  • How to create percentage comparison for custom SIP headers?