Use the show email-analysis url from command to view the cumulative statistics such as the total number of suspicious URLs that were submitted to the virtual machine for analysis, the total number of URLs that were detected as malicious, the total number of events that were detected, and the total number of URLs with each system status type during a specified time period.
Use the show email-analysis url since command to view the cumulative statistics such as the total number of suspicious URLs that were submitted to the virtual machine for analysis, the total number of URLs that were detected as malicious, the total number of events that were detected, and the total number of URLs with each system status type from a specified time up to the present.
Note
By default, the Email Security - Server appliance displays the detailed statistics for email URLs for the last 24 hours.
The output of the
show email-analysis url fromcommand andshow email-analysis url sincecommand may show a different time period from the time period that you specified. This discrepancy could be due to when data is available.The Email Security - Server appliance does not immediately update the count for each type of statistics entry for email URLs. After an email is received, there can be a delay of up to two minutes before the appliance updates the count of each entry.
Go to CLI enable mode.
hostname > enable
Specify the time period.
hostname > show email-analysis url from <start_date> <start_time> to <end_date> <end_time>
where:
<start_date>is specified in the format of yyyy/mm/dd.<start_time>is specified in the format of hh:mm:ss.<end_date>is specified in the format of yyyy/mm/dd.<end_time>is specified in the format of hh:mm:ss.
View the statistics for email URLs for the specified time period.
The following example displays the statistics for email URLs that have been submitted starting on 2017/11/24 and ending on 2017/12/29.
hostname > show email-analysis url from 2017/11/24 15:00:00 to 2017/12/29 15:00:00 URLs Statistics: Stats Time - Start Time: 2017/12/12 16:00:00 End Time: 2017/12/29 15:00:00 Total URLs Submitted : 28 Objects Analyzed : 7 Objects identified as Malicious : 6 - VM verified : 6 - Duplicate to VM verified : 0 - Known checksum match : 6 Total events : 13 os-change-anomaly events : 2 vm-outbound-comm events : 2 checksum-match events : 9 Objects break down by system status, Total : 7 Submitted for VM analysis : 7
Go to CLI enable mode.
hostname > enable
Specify the number of days, hours, minutes, or seconds before the present time.
To specify a number of days:
hostname > show email-analysis url since <number> days
where
<number>is the number of days.To specify a number of hours:
hostname > show email-analysis url since <number> hours
where
<number>is the number of hours.To specify a number of minutes:
hostname > show email-analysis url since <number> minutes
where
<number>is the number of minutes.To specify a number of seconds:
hostname > show email-analysis url since <number> seconds
where
<number>is the number of seconds.
View the statistics about email URLs that have been submitted for analysis from a specified time up to the present.
The following example displays the statistics for email URLs that have been submitted in the past 30 days:
hostname > show email-analysis url since 30 days URLs Statistics: Stats Time - Start Time: 2017/12/18 17:00:00 End Time: 2018/01/17 17:36:08 Total URLs Submitted : 72 Objects Analyzed : 12 Objects identified as Malicious : 4 - VM verified : 4 - Duplicate to VM verified : 0 - Known checksum match : 4 Total events : 24 vm-signature-match events : 0 os-change-anomaly events : 0 vm-outbound-comm events : 0 checksum-match events : 24 Objects break down by system status, Total : 12 Submitted for VM analysis : 12 Invalid : 0