Hello all,
I am attempting to our daily PhoneCallLog.CSV into our SIEM. I can get it in fine but I noticed that the payload was odd--there are questions marks in between each character. This appears to be the same with all CSV files in the log directory but the .txt files are encoded in UTF-8 as is set in the Debug log encoding setting in the BlackBerry Server Configuration.
I looked at the log file with notepad and it appears as it should (see below).
"Name.ID","Type of Call","Name","Phone Number","Start Date","Server Log Date","Elapsed Time","Memo","Command","UID","Phone Line"
When I open the log with vim, I receive the following output.
ÿþ"^@N^@a^@m^@e^@.^@I^@D^@"^@,^@"^@P^@I^@N^@"^@,^@"^@E^@m^@a^@i^@l^@^@A^@d^@d^@r^@e^@s^@s^@"^@,^@"^@T^@y^@p^@e^@ ^@o^@f^@^@M^@e^@s^@s^@a^@g^@e^@"^@,^@"^@T^@o^@"^@,^@"^@C^@c^@"^@,^@"^@B^@c^@c^@"^@,^@"^@F^@r^@o^@m^@"^@,^@"^@S^@u^@b^@j^^@c^@t^@"^@,^@"^@B^@o^@d^@y^@"^@,^@"^@S^@e^@n^@d^@/^@R^@e^@c^@e^@i^@v^@e^@d^@^@D^@a^@t^@e^@"^@,^@"^@S^@e^@r^@v^@e^@r^@^@L^@o^@g^@^@D^@a^@t^@e^@"^@,^@"^@O^@v^@e^@r^@a^@l^@l^@ ^@M^@e^@s^@s^@a^@g^@e^@^@S^@t^@a^@t^@u^@s^@"^@,^@"^@C^@o^@m^@m^@a^@n^@d^@"^@,^@"^@U^@I^@D^@"^@
The header is ÿþ
The rest is the ASCII character followed by ^@
Hex:
00000000 ff fe 22 00 4e 00 61 00 6d 00 65 00 2e 00 49 00 |..".N.a.m.e...I.|
00000010 44 00 22 00 2c 00 22 00 54 00 79 00 70 00 65 00 |D.".,.".T.y.p.e.|
00000020 20 00 6f 00 66 00 20 00 43 00 61 00 6c 00 6c 00 | .o.f. .C.a.l.l.|
00000030 22 00 2c 00 22 00 4e 00 61 00 6d 00 65 00 22 00 |".,.".N.a.m.e.".|
00000040 2c 00 22 00 50 00 68 00 6f 00 6e 00 65 00 20 00 |,.".P.h.o.n.e. .|
00000050 4e 00 75 00 6d 00 62 00 65 00 72 00 22 00 2c 00 |N.u.m.b.e.r.".,.|
00000060 22 00 53 00 74 00 61 00 72 00 74 00 20 00 44 00 |".S.t.a.r.t. .D.|
00000070 61 00 74 00 65 00 22 00 2c 00 22 00 53 00 65 00 |a.t.e.".,.".S.e.|
00000080 72 00 76 00 65 00 72 00 20 00 4c 00 6f 00 67 00 |r.v.e.r. .L.o.g.|
00000090 20 00 44 00 61 00 74 00 65 00 22 00 2c 00 22 00 | .D.a.t.e.".,.".|
000000a0 45 00 6c 00 61 00 70 00 73 00 65 00 64 00 20 00 |E.l.a.p.s.e.d. .|
000000b0 54 00 69 00 6d 00 65 00 22 00 2c 00 22 00 4d 00 |T.i.m.e.".,.".M.|
000000c0 65 00 6d 00 6f 00 22 00 2c 00 22 00 43 00 6f 00 |e.m.o.".,.".C.o.|
000000d0 6d 00 6d 00 61 00 6e 00 64 00 22 00 2c 00 22 00 |m.m.a.n.d.".,.".|
000000e0 55 00 49 00 44 00 22 00 2c 00 22 00 50 00 68 00 |U.I.D.".,.".P.h.|
000000f0 6f 00 6e 00 65 00 20 00 4c 00 69 00 6e 00 65 00 |o.n.e. .L.i.n.e.|
00000100 22 00 0d 00 0a 00 22 00 56 00 69 00 6c 00 6c 00 |"
Running file on the file results in no output.
Is there any way to change this format in the BlackBerry settings?
Why would Research in Motion format/encode their CSV files like this?
Thanks,
Professor Botee
