The Alarm Filters (Toll Fraud Detection)
|08:18|067|R.JONES |OUT| 5553333|05:36|00.75|
|08:20|091|R.PETERS |OUT| 19005551212|31:07|41.00|
|08:21|002|P.BROWN |OUT| 1900555444411#2|00:57|00.20|
Figure 9.10: Alarm Filter Format; Match Parameters Example 4
Example 4: The "Contains String" Operator ($)
This clue provides an example of how the "Contains String" operator ($)
can search a ﬁeld for a speciﬁc text string, without regard for the string's
position within the ﬁeld. This is useful in cases where the call record
includes a ﬁeld with right justiﬁed numbers (e.g., the number dialed).
For this example, assume that the Alarm Filter Format is deﬁned as shown
in Figure 9.10. Note that the ﬁrst three lines in Figure 9.10 are sample call
records, and the fourth line is the Alarm Filter Format.
Where A is the ﬁeld that lists the number dialed.
In this example, the PBX also records digits entered after the call has
connected. This is often seen in cases where the caller is prompted to press
numbers in order to access a speciﬁc department or extension. In the third
line of the example, the digits "11#2" represent digits entered after the call
Match Parameters for this Alarm Clue would be deﬁned as follows:
Where A$1900 tells NetLink II to count calls that have the string "1900"
anywhere in the "A" ﬁeld. When the "$" operator is used, wild card
characters are not used to ﬁll the remaining digits.
Note: When the "Contains String" operator is used, the clue may
also count call records that do not ﬁt the intended purpose of the
clue. For example, the clue in this example would also count calls
to any number that contains the string "1900", such as "555-1900".