Do you have UDP switched ON in the SIP Protocols section on the VCS-E? If so, do you have any reason why this is switched on, perhaps remote IP phones registering directly to the VCS-E? If not, then you might want to switch this off as you will find that a lot of calls/searched are generated from a SIP scanner program.
You might also want to add a couple of CPL rules to block these types of call.
I can't help you with the external logging requirement, but these should help WRT the VCSs logging.
if the request are coming from a particular IP or bunch of ip's you can try to put the firewall rule so that VCS doesn't entertain the request from this ip's.
VCS has limited buffer to keep this search history in its database and after certain logs it rewrites this. However you can look for the calls in other logs on the VCS when you navigate to "/mnt/harddisk/log" and then you can check the unified log and search for the call with E.164 number or a SIP URI or with IP-Address.
apart from the call logs, there would lot of other logs so you need to be good at finding the relevant things.
Are you getting this error “Installer User Interface Mode Not Supported. The installer cannot run in this UI mode. To specify the interface mode, use the -i command-line option, followed by the UI mode identifier. The value UI mode identifiers...
The below trick might come handy when you have to add a new node to a cluster but you don't have or is unsure of the security password for the publisher. This procedure has been around for ages.
1) Login into the CLI of the Publisher.