Metrics Dictionary Guide

This page is the canonical field reference for all event families exported by the collector. Use it to build queries, design dashboards, and troubleshoot data issues.

Event Families Overview

Log source	Purpose	Typical use
`MSTeams_CallRecords_CallMetadata`	Call-level summary	Call volume, type, and overall health
`MSTeams_CallRecords_StreamDetails`	Stream-level quality	Troubleshoot jitter, RTT, packet loss
`MSTeams_CallRecords_PSTN`	PSTN activity	Telephony usage and call details
`MSTeams_CallRecords_DirectRouting`	Direct Routing activity	SIP/routing troubleshooting
`MSTeams_CallRecords_AutoAttendant`	Auto attendant usage	Voice workflow visibility
`MSTeams_CallRecords_CallQueue`	Call queue usage	Queue behavior monitoring
`MSTeams_ServiceAnnouncement`	Microsoft incidents	Correlate degradations with official incidents
`MSTeams_RemoteCollectionHealth`	Remote collection status (extension)	Verify extension-based agent health
`MSTeams_CollectionHealth`	Collector status	Verify ingestion health

Models Summary

Model	Log source	Fields
`AutoAttendantLog`	`MSTeams_CallRecords_AutoAttendant`	`28`
`CallMetadataLog`	`MSTeams_CallRecords_CallMetadata`	`12`
`CallQueueLog`	`MSTeams_CallRecords_CallQueue`	`21`
`CollectionHealthLog`	`MSTeams_CollectionHealth`	`10`
`RemoteCollectionHealthLog`	`MSTeams_RemoteCollectionHealth`	`10`
`DirectRoutingCallLog`	`MSTeams_CallRecords_DirectRouting`	`22`
`PstnCallLog`	`MSTeams_CallRecords_PSTN`	`22`
`ServiceHealthLog`	`MSTeams_ServiceAnnouncement`	`17`
`StreamDetailsLog`	`MSTeams_CallRecords_StreamDetails`	`89`

AutoAttendantLog

Log source: MSTeams_CallRecords_AutoAttendant

Name	Type	Description
`service`	`ServiceMetadata \| None`	Build metadata attached to the service that produced the log.
`log.source`	`str`	Identifier for the log source (log family) of this record.
`loglevel`	`LogLevel`	Technical log severity level.
`call.id`	`str \| None`	Unique call identifier (GUID). Use this to correlate with other call-record logs.
`timestamp`	`datetime \| None`	Collection timestamp for the log entry (UTC datetime).
`duration`	`Any \| None`	Duration of the call in seconds.
`firstIsCaller`	`Any \| None`	Whether the first user in the record is the caller.
`firstUPN`	`str \| None`	UserPrincipalName (sign-in name) of the first user in the record.
`pstnCallType`	`str \| None`	Type of PSTN call (e.g. user call, conference call).
`pstnConnectivityType`	`str \| None`	PSTN connectivity type (Calling Plan, Direct Routing, Teams Phone Mobile, ACS).
`pstnCallDuration`	`Any \| None`	Duration of the PSTN leg of the call, in seconds.
`record.timestamp`	`datetime \| None`	Timestamp of the source record as reported by the upstream service.
`startDateTime`	`datetime \| None`	Call start time (UTC datetime).
`autoAttendantCallFlow`	`str \| None`	The Auto Attendant call flow used for the call.
`autoAttendantCallResult`	`str \| None`	Final result of the call in the Auto Attendant (e.g. terminated, transferred).
`autoAttendantCallerActionCounts`	`Any \| None`	Count of actions selected by the caller in the Auto Attendant during the call.
`autoAttendantChainDurationInSecs`	`Any \| None`	Duration of the call inside the Auto Attendant chain, in seconds.
`autoAttendantChainIndex`	`Any \| None`	Position of the Auto Attendant in the call chain (nesting).
`autoAttendantChainStartTime`	`datetime \| None`	Time when the Auto Attendant chain started.
`autoAttendantCount`	`Any \| None`	Number of Auto Attendants the call passed through.
`autoAttendantDirectorySearchMethod`	`str \| None`	Method used to search the directory (DTMF or voice).
`autoAttendantId`	`str \| None`	Auto Attendant unique identifier (GUID).
`autoAttendantIdentity`	`str \| None`	Name or identity of the Auto Attendant.
`autoAttendantTransferAction`	`str \| None`	Transfer action taken by the Auto Attendant.
`avgAutoAttendantChainDurationSeconds`	`float \| None`	Average duration of the Auto Attendant chain, in seconds.
`avgCallDuration`	`float \| None`	Average call duration, in seconds.
`totalAudioStreamDuration`	`float \| None`	Total audio stream duration, in seconds.
`totalCallCount`	`float \| None`	Total number of calls (1 per record, used for sums).

CallMetadataLog

Log source: MSTeams_CallRecords_CallMetadata

Name	Type	Description
`service`	`ServiceMetadata \| None`	Build metadata attached to the service that produced the log.
`log.source`	`str`	Identifier for the log source, set to ‘MSTeams_CallRecords_CallMetadata’ for this model.
`loglevel`	`LogLevel`	Technical log severity level.
`timestamp`	`datetime \| None`	Collection timestamp for the log entry (UTC datetime).
`startDateTime`	`datetime \| None`	Call start time (UTC datetime).
`call.id`	`str`	Unique call identifier (GUID). Use this to correlate with other call-record logs.
`type`	`str`	Call type and direction (e.g. peerToPeer, group, PSTN outbound/inbound).
`callHealth`	`str`	Aggregated health classification for the call across all streams (e.g. Good, Poor, Unclassified).
`modalities`	`list[str]`	Modalities observed in the call (e.g. audio, video, screenSharing).
`callDurationS`	`int`	Duration of the call in milliseconds.
`participantsNames`	`list[str]`	List of participant identifiers present in the call (user ids or endpoint ids).
`countParticipants`	`int`	Number of participants counted using legacy rules (user/guest identities only).

CallQueueLog

Log source: MSTeams_CallRecords_CallQueue

Name	Type	Description
`service`	`ServiceMetadata \| None`	Build metadata attached to the service that produced the log.
`log.source`	`str`	Identifier for the log source (log family) of this record.
`loglevel`	`LogLevel`	Technical log severity level.
`call.id`	`str \| None`	Unique call identifier (GUID). Use this to correlate with other call-record logs.
`dialogId`	`str \| None`	Dialog identifier, used for troubleshooting purposes.
`timestamp`	`datetime \| None`	Collection timestamp for the log entry (UTC datetime).
`duration`	`Any \| None`	Duration of the call in seconds.
`agentName`	`str \| None`	UserPrincipalName of the agent who handled the call.
`record.timestamp`	`datetime \| None`	Timestamp of the source record as reported by the upstream service.
`startDateTime`	`datetime \| None`	Call start time (UTC datetime).
`pstnCallType`	`str \| None`	Type of PSTN call (e.g. user call, conference call).
`pstnConnectivityType`	`str \| None`	PSTN connectivity type (Calling Plan, Direct Routing, Teams Phone Mobile, ACS).
`pstnCallDuration`	`Any \| None`	Duration of the PSTN leg of the call, in seconds.
`callQueueAgentCount`	`Any \| None`	Number of agents configured in the call queue.
`callQueueAgentOptInCount`	`Any \| None`	Number of agents opted-in to the call queue.
`callQueueCallResult`	`str \| None`	Final result of the call (abandoned, agent answered, overflowed, timed out, no agents, other).
`callQueueDurationSeconds`	`Any \| None`	Call duration inside the call queue, in seconds.
`callQueueFinalStateAction`	`str \| None`	Final state action of the call (overflow, timeout, no agents) with routing outcome.
`callQueueId`	`str \| None`	Call queue unique identifier (GUID).
`callQueueIdentity`	`str \| None`	Name of the resource account attached to the call queue.
`callQueueTargetType`	`str \| None`	Target type of the call outcome (abandoned, agent answered, overflowed, timed out, no agents).

CollectionHealthLog

Log source: MSTeams_CollectionHealth

Name	Type	Description
`service`	`ServiceMetadata \| None`	Build metadata attached to the service that produced the log.
`log.source`	`str`	Identifier for the log source (log family) of this record.
`loglevel`	`LogLevel`	Technical log severity level.
`timestamp`	`datetime \| None`	Health log emission timestamp.
`version`	`str \| None`	Collector application version.
`stats`	`HealthStats \| None`	Canonical collection-health KPIs grouped by collect, process, deliver, and overall phases.
`license`	`HealthLicense \| None`	License status snapshot included in health logs.
`features`	`HealthFeatures \| None`	Feature toggle states at collection time.
`output`	`HealthOutput \| dict[str, Any] \| None`	Configured output destination URLs (compatibility section).
`cycle`	`HealthCycle \| None`	Cycle metadata.

RemoteCollectionHealthLog

Log source: MSTeams_RemoteCollectionHealth

Name	Type	Description
`service`	`ServiceMetadata \| None`	Build metadata attached to the service that produced the log.
`log.source`	`str`	Identifier for the log source (log family) of this record.
`loglevel`	`LogLevel`	Technical log severity level.
`timestamp`	`datetime \| None`	Health log emission timestamp.
`version`	`str \| None`	Collector application version.
`stats`	`HealthStats \| None`	Canonical collection-health KPIs grouped by collect, process, deliver, and overall phases.
`license`	`HealthLicense \| None`	License status snapshot included in health logs.
`features`	`HealthFeatures \| None`	Feature toggle states at collection time.
`output`	`HealthOutput \| dict[str, Any] \| None`	Configured output destination URLs (compatibility section).
`cycle`	`HealthCycle \| None`	Cycle metadata.

DirectRoutingCallLog

Log source: MSTeams_CallRecords_DirectRouting

Name	Type	Description
`service`	`ServiceMetadata \| None`	Build metadata attached to the service that produced the log.
`log.source`	`str`	Identifier for the log source (log family) of this record.
`loglevel`	`LogLevel`	Technical log severity level.
`call.id`	`str \| None`	Unique call identifier.
`userPrincipalName`	`str \| None`	UserPrincipalName (sign-in name) in Microsoft Entra ID.
`userDisplayName`	`str \| None`	Display name of the user.
`startDateTime`	`datetime \| None`	Call start time.
`inviteDateTime`	`datetime \| None`	The date and time when the initial invite was sent.
`failureDateTime`	`datetime \| None`	Only exists for failed (not fully established) calls.
`timestamp`	`datetime \| None`	Collection timestamp for the log entry (UTC datetime).
`duration`	`int \| None`	Duration of the call in seconds.
`callType`	`str \| None`	Call type and direction.
`successfulCall`	`bool \| None`	Success or attempt.
`calleeNumber`	`str \| None`	Number of the user or bot who received the call. E.164 format, but might include other data.
`callerNumber`	`str \| None`	Number of the user or bot who made the call. E.164 format, but might include other data.
`mediaPathLocation`	`str \| None`	The datacenter used for media path in a nonbypass call.
`signalingLocation`	`str \| None`	The datacenter used for signaling for both bypass and nonbypass calls.
`finalSipCode`	`int \| None`	The final response code with which the call ended. For more information, see RFC 3261.
`callEndSubReason`	`int \| None`	In addition to the SIP codes, Microsoft has subcodes that indicate the specific issue.
`finalSipCodePhrase`	`str \| None`	Description of the SIP code and Microsoft subcode.
`trunkFullyQualifiedDomainName`	`str \| None`	Fully qualified domain name of the session border controller.
`mediaBypassEnabled`	`bool \| None`	Indicates whether the trunk was enabled for media bypass.

PstnCallLog

Log source: MSTeams_CallRecords_PSTN

Name	Type	Description
`service`	`ServiceMetadata \| None`	Build metadata attached to the service that produced the log.
`log.source`	`str`	Identifier for the log source (log family) of this record.
`loglevel`	`LogLevel`	Technical log severity level.
`call.id`	`str \| None`	Call identifier. Not guaranteed to be unique.
`userPrincipalName`	`str \| None`	The user principal name (sign-in name) in Microsoft Entra ID.
`userDisplayName`	`str \| None`	Display name of the user.
`startDateTime`	`datetime \| None`	Call start time.
`timestamp`	`datetime \| None`	Collection timestamp for the log entry (UTC datetime).
`duration`	`int \| None`	How long the call was connected, in seconds.
`charge`	`float \| str \| None`	Amount of money or cost of the call that is charged to your account.
`callType`	`str \| None`	Indicates whether the call was a PSTN outbound or inbound call and the type of call
`currency`	`str \| None`	Type of currency used to calculate the cost of the call (ISO 4217).
`calleeNumber`	`str \| None`	Number dialed in E.164 format.
`callerNumber`	`str \| None`	Number that received the call for inbound calls or the number dialed for outbound calls.
`usageCountryCode`	`str \| None`	Country code of the user. For details, see ISO 3166-1 alpha-2.
`tenantCountryCode`	`str \| None`	Country code of the tenant. For details, see ISO 3166-1 alpha-2.
`connectionCharge`	`float \| str \| None`	Connection fee price.
`destinationName`	`str \| None`	Country or region dialed.
`licenseCapability`	`str \| None`	The license used for the call.
`inventoryType`	`str \| None`	User’s phone number type, such as a service or toll-free number.
`operator`	`str \| None`	The telecommunications operator which provided PSTN services for this call.
`callDurationSource`	`str \| None`	The source of the call duration data.

ServiceHealthLog

Log source: MSTeams_ServiceAnnouncement

Name	Type	Description
`service`	`str \| None`	Affected service
`log.source`	`str`	Identifier for the log source (log family) of this record.
`loglevel`	`LogLevel`	Technical log severity level.
`timestamp`	`datetime \| None`	Collection timestamp (UTC datetime).
`startDateTime`	`datetime \| None`	Call start time (UTC datetime).
`endDateTime`	`datetime \| None`	End time of the service event.
`id`	`str \| None`	ServiceHealthIssue.id
`title`	`str \| None`	Issue title
`classification`	`str \| None`	ServiceHealthClassificationType value
`origin`	`str \| None`	Issue origin (microsoft/thirdParty/etc.)
`impactDescription`	`str \| None`	Impact description from the SDK
`serviceHealthStatus`	`ServiceHealthStatus \| None`	ServiceHealthStatus value
`feature`	`str \| None`	Feature name
`featureGroup`	`str \| None`	Feature group
`details`	`str \| None`	Content of the most recent post
`post.type`	`PostType \| None`	PostType of the most recent post
`post.format`	`BodyType \| None`	ContentType of the most recent post

StreamDetailsLog

Log source: MSTeams_CallRecords_StreamDetails

Name	Type	Description
`service`	`ServiceMetadata \| None`	Build metadata attached to the service that produced the log.
`log.source`	`str`	Identifier for the log source (log family) of this record.
`loglevel`	`LogLevel`	Technical log severity level.
`timestamp`	`datetime \| None`	Collection timestamp for the log entry.
`stream.id`	`str \| None`	Unique identifier for the stream.
`startDateTime`	`datetime \| None`	UTC time when the stream started.
`streamDurationS`	`int \| None`	Duration of the stream in seconds.
`streamDirection`	`str \| None`	Direction of the stream.
`mediaLabel`	`str \| None`	Media type of the stream (audio, video, screen-sharing).
`call.id`	`str \| None`	Unique call identifier.
`type`	`str \| None`	Call type and direction.
`caller.id`	`str \| None`	Identifier of the calling endpoint or user.
`caller.displayName`	`str \| None`	Display name of the caller.
`caller.userPrincipalName`	`str \| None`	UserPrincipalName (sign-in name) of the caller.
`caller.deviceName`	`str \| None`	Name of the caller’s device.
`caller.cpuName`	`str \| None`	CPU information for the caller’s device.
`caller.platform`	`str \| None`	Platform of the caller’s client.
`caller.productFamily`	`str \| None`	Product family of the caller’s client.
`caller.teamsVersion`	`str \| None`	Teams client version reported by the caller.
`caller.isBot`	`bool`	True if the caller endpoint is a Graph service/bot (serviceUserAgent).
`caller.botRole`	`str \| None`	Graph ServiceRole of the caller bot (e.g. customBot, voicemail).
`caller.botAppId`	`str \| None`	Application ID of the caller bot, extracted from userAgent headerValue.
`callerNetwork.ipAddress`	`str \| None`	Caller network IP address.
`callerNetwork.subnet`	`str \| None`	Caller network subnet.
`callerNetwork.reflexiveipAddress`	`str \| None`	Caller reflexive (NAT) IP address.
`callerNetwork.relayIPAddress`	`str \| None`	Relay IP address used by the caller if any.
`callerNetwork.connectionType`	`str \| None`	Caller network connection type (wired/wifi/mobile).
`callerNetwork.networkTransportProtocol`	`str \| None`	Transport protocol used by the caller’s network.
`caller.audio.input.deviceName`	`str \| None`	Caller audio input device name.
`caller.audio.input.driverVersion`	`str \| None`	Driver version for the caller’s audio input device.
`caller.audio.input.signalLevel`	`int \| None`	Signal level of the caller’s audio input.
`caller.audio.input.noiseLevel`	`int \| None`	Noise level measured on the caller’s audio input.
`caller.audio.output.deviceName`	`str \| None`	Caller audio output device name.
`caller.audio.output.driverVersion`	`str \| None`	Driver version for the caller’s audio output device.
`caller.audio.events.cpuInsufficiencyRatio`	`float \| None`	Fraction of the call where the caller’s client reported insufficient CPU for audio processing.
`caller.audio.events.inputFailureRatio`	`float \| None`	Fraction of the call with input failures on the caller side.
`caller.audio.events.outputFailureRatio`	`float \| None`	Fraction of the call with output failures on the caller side.
`caller.audio.events.deviceGlitchRatio`	`float \| None`	Fraction of the call with device glitches on the caller side.
`caller.audio.events.lowSpeechToNoiseRatio`	`float \| None`	Fraction of time the caller’s speech-to-noise ratio was low.
`caller.audio.events.lowSpeechLevelRatio`	`float \| None`	Fraction of time the caller’s speech level was low.
`caller.audio.events.clippingRatio`	`float \| None`	Fraction of audio frames clipped on the caller side.
`caller.audio.events.howlingCount`	`int \| None`	Howling events count detected for the caller.
`caller.audio.events.outputZeroVolumeRatio`	`float \| None`	Fraction of the call where the caller’s output volume was zero.
`caller.audio.events.outputMuteRatio`	`float \| None`	Fraction of the call where the caller’s output was muted.
`callee.audio.input.deviceName`	`str \| None`	Callee audio input device name.
`callee.audio.input.driverVersion`	`str \| None`	Driver version for the callee’s audio input device.
`callee.audio.input.signalLevel`	`int \| None`	Signal level of the callee’s audio input.
`callee.audio.input.noiseLevel`	`int \| None`	Noise level measured on the callee’s audio input.
`callee.audio.output.deviceName`	`str \| None`	Callee audio output device name.
`callee.audio.output.driverVersion`	`str \| None`	Driver version for the callee’s audio output device.
`callee.audio.events.cpuInsufficiencyRatio`	`float \| None`	Fraction of the call where the callee’s client reported insufficient CPU for audio processing.
`callee.audio.events.inputFailureRatio`	`float \| None`	Fraction of the call with input failures on the callee side.
`callee.audio.events.outputFailureRatio`	`float \| None`	Fraction of the call with output failures on the callee side.
`callee.audio.events.deviceGlitchRatio`	`float \| None`	Fraction of the call with device glitches on the callee side.
`callee.audio.events.lowSpeechToNoiseRatio`	`float \| None`	Fraction of time the callee’s speech-to-noise ratio was low.
`callee.audio.events.lowSpeechLevelRatio`	`float \| None`	Fraction of time the callee’s speech level was low.
`callee.audio.events.clippingRatio`	`float \| None`	Fraction of audio frames clipped on the callee side.
`callee.audio.events.howlingCount`	`int \| None`	Howling events count detected for the callee.
`callee.audio.events.outputZeroVolumeRatio`	`float \| None`	Fraction of the call where the callee’s output volume was zero.
`callee.audio.events.outputMuteRatio`	`float \| None`	Fraction of the call where the callee’s output was muted.
`callerNetwork.traceRouteHops`	`list[TraceRouteHopLog]`	Traceroute hops observed from the caller to the media endpoint.
`calleeNetwork.traceRouteHops`	`list[TraceRouteHopLog]`	Traceroute hops observed from the callee to the media endpoint.
`streamHealth`	`StreamHealthStatus`	Computed health classification for the stream.
`streamHealthCause`	`str \| None`	Primary cause for the stream health classification.
`streamHealthCauseDetails`	`str \| None`	Detailed information about the stream health cause.
`averageRoundTripTimeMs`	`int \| None`	Average network round-trip time in milliseconds.
`averageJitterMs`	`int \| None`	Average network jitter in milliseconds.
`averagePacketLossRatePercent`	`float \| None`	Average packet loss rate as a percentage.
`averageVideoFrameLossPercentage`	`float \| None`	Average percentage of video frames lost.
`averageVideoFrameRate`	`float \| None`	Average video frames per second.
`postForwardErrorCorrectionPacketLossRate`	`float \| None`	Packet loss rate after forward error correction (FEC).
`videoCodec`	`str \| None`	Codec name used to encode video for transmission on the network.
`callee.id`	`str \| None`	Identifier of the callee endpoint or user.
`callee.displayName`	`str \| None`	Display name of the callee.
`callee.userPrincipalName`	`str \| None`	UserPrincipalName (sign-in name) of the callee.
`callee.deviceName`	`str \| None`	Name of the callee’s device.
`callee.cpuName`	`str \| None`	CPU information for the callee’s device.
`callee.platform`	`str \| None`	Platform of the callee’s client.
`callee.productFamily`	`str \| None`	Product family of the callee’s client.
`callee.teamsVersion`	`str \| None`	Teams client version reported by the callee.
`callee.isBot`	`bool`	True if the callee endpoint is a Graph service/bot (serviceUserAgent).
`callee.botRole`	`str \| None`	Graph ServiceRole of the callee bot (e.g. customBot, voicemail).
`callee.botAppId`	`str \| None`	Application ID of the callee bot, extracted from userAgent headerValue.
`calleeNetwork.ipAddress`	`str \| None`	Callee network IP address.
`calleeNetwork.subnet`	`str \| None`	Callee network subnet.
`calleeNetwork.reflexiveipAddress`	`str \| None`	Callee reflexive (NAT) IP address.
`calleeNetwork.relayIPAddress`	`str \| None`	Relay IP address used by the callee if any.
`calleeNetwork.connectionType`	`str \| None`	Callee network connection type (wired/wifi/mobile).
`calleeNetwork.networkTransportProtocol`	`str \| None`	Transport protocol used by the callee’s network.

Operational Tip

If dashboard quality drops while MSTeams_ServiceAnnouncement shows an active incident, investigate Microsoft-side impact before changing local configuration.