Viewing statistics for email analysis results based on a time period using the CLI

Prev Next

Use the show email-analysis statistics from command to view the detailed statistics such as the total number of scanned emails, URLs, attachments, and bypassed emails that have been submitted for analysis during a specified time period.

Use the show email-analysis statistics since command to view the detailed statistics such as the total number of scanned emails, URLs, attachments, and bypassed emails that have been submitted for analysis from a specified time up to the present.

Note

By default, the Email Security - Server appliance displays the detailed statistics for email analysis for the last 24 hours.

The output of the show email-analysis statistics from command and show email-analysis statistics since command may show a different time period from the time period that you specified. This discrepancy could be due to when data is available.

The Email Security - Server appliance does not immediately update the count for each type of statistics entry for email analysis. After an email is received, there can be a delay of up to two minutes before the appliance updates the count of each entry.

To view statistics for email analysis during a specified time period:
  1. Go to CLI enable mode.

    hostname > enable
  2. Specify the time period.

    hostname > show email-analysis statistics from <start_date> <start_time> to <end_date> <end_time>

    where:

    • <start_date> is specified in the format of yyyy/mm/dd.

    • <start_time> is specified in the format of hh:mm:ss.

    • <end_date> is specified in the format of yyyy/mm/dd.

    • <end_time> is specified in the format of hh:mm:ss.

  3. View the email analysis statistics for the specified time period.

    The following example displays the email analysis statistics that have been submitted starting on 2017/11/27 and ending on 2017/12/29.

    hostname > show email-analysis statistics from 2017/11/27 00:00:00 to 2017/12/29 00:00:00 
    Email-Analysis Statistics:
    Stats Time - Start Time: 2017/12/12 16:00:00   End Time: 2017/12/29 00:00:00
      Total Emails Received:                                     33
      Total Emails Bypassed:                                      0 
      Total Emails Received with Attachments:                     4 
      Total Emails Received with URLs:                           28 
      Total Received Emails Analyzed:                            32
      Total Emails Received with Malicious Contents:              7
      Total Emails Blocked by YARA Analysis:                      0
      Total Emails not scanned due to allowed-list:               0
      Total Emails not scanned due to exceeding max size limit:   0
      Total Emails blocked due to blocked-list:                   0 
      Total Emails Received with Riskware Block:                  4 
      Total Emails Received with Riskware Match:                  0
      Total Attachments Received:                                 4
      Total Attachments Analyzed:                                 4
      Total Attachments Considered Malicious:                     1
      Total Signature Images not Analyzed:                        0 
      Total Text Attachments not Analyzed:                        0
      Total URLs Received:                                       28
      Total URLs Analyzed:                                       28 
      Total URLs Considered Malicious:                            6 
      Total URLs Suspicious due to Adv URL Defense:              21 
      Total URLs Blacklisted due to Phishing:                     0
      Total URLs Whitelisted due to Phishing:                     1
      Total URLs Whitelisted due to Adv URL Defense:              0
      Total Riskware Block Count:                                 4
      Total Riskware match Count:                                 0
      Total Number of bypasses:                                   0
To view the statistics for email analysis since a specified time:
  1. Go to CLI enable mode.

    hostname > enable
  2. Specify the number of days, hours, minutes, or seconds before the present time.

    • To specify a number of days:

      hostname > show email-analysis statistics since <number> days

      where <number> is the number of days.

    • To specify a number of hours:

      hostname > show email-analysis statistics since <number> hours

      where <number> is the number of hours.

    • To specify a number of minutes:

      hostname > show email-analysis statistics since <number> minutes

      where <number> is the number of minutes.

    • To specify a number of seconds:

      hostname > show email-analysis statistics since <number> seconds

      where <number> is the number of seconds.

  3. View the email analysis statistics that have been submitted for analysis from a specified time up to the present.

    The following example displays the email analysis statistics that have been submitted in the past two days:

    hostname > show email-analysis statistics since 2 days
    Email-Analysis Statistics:
    Stats Time - Start Time: 2018/01/15 15:00:00   End Time: 2018/01/17 15:00:00
      Total Emails Received:                                     30
      Total Emails Bypassed:                                      0
      Total Emails Received with Attachments:                    30
      Total Emails Received with URLs:                            0
      Total Received Emails Analyzed:                            30
      Total Emails Received with Malicious Contents:             25
      Total Emails Blocked by YARA Analysis:                      0
      Total Emails not scanned due to allowed-list:               0
      Total Emails not scanned due to exceeding max size limit:   0
      Total Emails blocked due to blocked-list:                   0
      Total Emails Received with Riskware Block:                  1
      Total Emails Received with Riskware Match:                  0
      Total Attachments Received:                                30
      Total Attachments Analyzed:                                30
      Total Attachments Considered Malicious:                    25
      Total Signature Images not Analyzed:                        0
      Total Text Attachments not Analyzed:                        0
      Total URLs Received:                                        0
      Total URLs Analyzed:                                        0
      Total URLs Considered Malicious:                            0
      Total URLs Suspicious due to Adv URL Defense:               0
      Total URLs Blacklisted due to Phishing:                     0
      Total URLs Whitelisted due to Phishing:                     0
      Total URLs Whitelisted due to Adv URL Defense:              0
      Total Riskware Block Count:                                 1
      Total Riskware match Count:                                 0
      Total Number of bypasses:                                   0