Follow these steps to view the statistics for each type of rule from a blocked list.
To view the statistics about a blocked list:
Go to CLI configuration mode.
hostname > enable
View the statistics for the highest number of matches for each rule type on a blocked list.
hostname # show email-analysis blocked-list statistics Blocked-Lists Sender-Email-Address: hacker@malware.com - 2 Blocked-Lists Sender-Domain: malicious.com - 6 Blocked-Lists Sender-MTA-IP: No rules defined yet. Blocked-Lists URL: http://www.test.com - 6 Blocked-Lists MD5-Checksum: No rules defined yet.
View all the statistics for all rules and the total number of matches for each rule on a blocked list.
hostname # show email-analysis blocked-list statistics all Email-Analysis Blocked List Statistics: Blocked-List Sender-Email-Address: Sender-Email-Address hacker2@malware.com Matched 1 processed urls Sender-Email-Address hacker3@malware.com Matched 1 processed urls Sender-Email-Address hacker@malware.com Matched 2 processed urls Blocked-List Sender-Domain: Sender-Domain fakesite.com Matched 0 emails Sender-Domain malicious.com Matched 6 emails Sender-Domain malsite.com Matched 2 emails Blocked-List for Sender-MTA-IP not defined. Blocked-List URL: URL http://www.fakesite.com Matched 0 processed urls URL http://www.fakewebsite.com Matched 2 processed urls URL http://www.malsite.com Matched 1 processed urls URL http://www.test.com Matched 6 processed urls Blocked-List for MD5-Checksum not defined.