Press CTRL+K to open search

Review indicator and alert aging settings using the CLI

  • Published on Sep 10, 2026
  • 1 minute(s) read
Prev Next
To review indicator and alert aging settings using the CLI:

  1. Enable the CLI configuration mode:

    hostname > enable

    hostname # configure terminal

  2. List indicator rule and alert aging settings:

    hostname (config) # show hx server detection

    The following is sample output from this command:

    HX Server Detection Configuration: Generated Indicator Aging: enabled Generated Indicator Aging Period: 14 days Generated Condition Aging: enabled Generated Condition Aging Period: 30 days Source Alert Aging: enabled Source Alert Aging Period: 30 days Alert Aging Period: 30 days False Positive Alert Aging Period: 1 day Intel Matching: enabled Legacy notification listener active: no Malicious.URL Indicator Generation (legacy): yes Suspicious (noisy) Indicator Generation (legacy): no Inbound alert poll interval: 5 minutes Inbound alert minimum severity: majr No ignored alert types. Last bookmark ID: 0

:
Related articles
  • Review indicator and alert aging settings using the CLI
    Endpoint Detection and Response with Forensics (EDRF) > Detect and handle potential threats with EDRF > Configure EDRF to detect potential threats > Threat detection using IOC rules > Threat detection using IOC rules in the Forensics workspace > Indicator rule aging > Review indicator rule aging settings
  • Reviewing alert aging settings using the CLI
    Endpoint Security (HX) > Endpoint Security (HX) Server 10.x User Guide > Configuration > Alert aging > Reviewing alert aging settings
  • Reviewing alert aging settings using the CLI
    Endpoint Detection and Response with Forensics (EDRF) > Manage your workspaces > Configure Forensics workspace > Alert aging > Reviewing alert aging settings