Displays a list of all alerts in a specified time frame, ordered by host.
Syntax
show alerts hosts timeframe <start_time> <end_time>
Parameters
<start-time>
Start time in N<h|d|m> format, where N is a number, h is hour, d is day, and m is month. For example, 24h is 24 hours.
<end-time>
Optional end time in N<h|d|m> format.
Examples
The following example displays a list of alerts for the past hour, ordered by host.
hostname # show alerts hosts timeframe 1h SrcIP Severity #Inf #Cb #Blkd Time Last Malware ------------------------------------------------------------------------------- 10.8.138.246 minor 1 0 0 2019-01-25 10:38:55 Exploit.Kit.Malvertisement 10.11.141.50 critical 0 1 0 2019-01-25 10:14:02 Trojan.Cutwail 10.12.193.32 critical 1 5 0 2019-01-25 10:43:59 Trojan.Downloader.Bredolab 10.21.142.151 critical 1 1 0 2019-01-25 10:18:27 Exploit.Kit.URL 10.37.242.92 critical 3 5 0 2019-01-25 10:22:00 Exploit.Kit.URL 10.38.197.201 minor 1 0 0 2019-01-25 11:00:40 Exploit.Kit.Redirect 10.39.16.138 critical 0 1 0 2019-01-25 10:57:57 Tool.CoinMiner 10.45.82.205 minor 1 0 0 2019-01-25 10:14:10 Exploit.Kit.Redirect 10.45.105.97 minor 1 0 0 2019-01-25 10:07:46 Exploit.JSIframe.Psyme 10.57.251.21 critical 0 1 0 2019-01-25 10:43:24 Tool.CoinMiner 10.61.159.112 minor 1 0 0 2019-01-25 10:46:32 Exploit.Kit.Redirect 10.62.100.143 critical 0 1 0 2019-01-25 10:39:24 Trojan.ZeroAccess 10.62.124.24 critical 0 2 0 2019-01-25 10:55:37 Trojan.Cutwail 10.86.226.187 critical 0 1 0 2019-01-25 11:00:17 Tool.CoinMiner 10.87.211.253 critical 0 1 0 2019-01-25 10:19:44 Trojan.Expiro 10.92.95.151 critical 0 3 0 2019-01-25 10:41:49 Trojan.Cutwail 10.112.143.120 minor 1 0 0 2019-01-25 10:37:47 Exploit.Kit.Redirect 10.112.248.160 critical 1 0 0 2019-01-25 10:16:04 Exploit.Kit.URL 10.113.142.119 critical 0 2 0 2019-01-25 10:41:49 InfoStealer.Banker.Zbot 10.115.233.59 minor 1 0 0 2019-01-25 10:07:37 Exploit.JSIframe.Psyme 10.118.115.208 critical 0 1 0 2019-01-25 10:25:20 Trojan.Dimnie 10.178.143.223 critical 0 2 0 2019-01-25 10:19:08 Trojan.Dimnie 10.185.62.39 critical 0 1 0 2019-01-25 10:10:20 Trojan.Sality 10.185.182.62 critical 1 1 0 2019-01-25 10:51:53 Trojan.Cutwail 10.232.142.175 critical 1 2 0 2019-01-25 10:17:07 Exploit.Kit.URL 10.251.9.246 minor 1 0 0 2019-01-25 11:02:45 Exploit.Kit.Redirect 10.251.50.248 critical 0 1 0 2019-01-25 10:58:04 Tool.CoinMiner
The following example displays a list of alerts for the day before yesterday, ordered by host.
hostname # show alerts hosts timeframe 2d 1d SrcIP Severity #Inf #Cb #Blkd Time Last Malware ------------------------------------------------------------------------------- 10.1.131.205 critical 0 2 0 2019-01-26 20:26:46 Trojan.NaviPromo 10.1.141.37 minor 1 1 0 2019-01-26 21:56:07 Trojan.Ngrbot.DNS 10.2.67.118 critical 0 1 0 2019-01-26 19:14:42 Tool.CoinMiner 10.2.70.112 minor 0 1 0 2019-01-26 20:28:39 Trojan.Ngrbot.DNS 10.2.91.111 critical 0 1 0 2019-01-26 19:58:37 Trojan.Generic 10.2.135.116 critical 0 8 0 2019-01-27 04:00:20 Virus.Virut 10.2.212.236 minor 2 0 0 2019-01-27 01:17:19 Exploit.Kit.Redirect 10.3.181.85 critical 0 2 0 2019-01-27 09:20:03 InfoStealer.Frethog.AD 10.4.108.32 critical 0 2 0 2019-01-27 09:40:45 Bot.Grum 10.4.197.3 minor 1 1 0 2019-01-26 21:10:05 Exploit.Kit.Redirect 10.5.4.249 critical 0 3 0 2019-01-26 21:17:23 Trojan.Injector.gen.AB 10.5.160.20 critical 0 1 0 2019-01-26 21:48:24 Trojan.Cutwail 10.6.42.147 minor 0 1 0 2019-01-26 22:19:02 Trojan.Ngrbot.DNS 10.6.44.184 critical 0 4 0 2019-01-27 04:02:52 Monitor.Android.Gizmo 10.6.132.117 minor 0 1 0 2019-01-26 21:41:58 Trojan.Ngrbot.DNS 10.6.143.176 critical 2 1 0 2019-01-27 00:41:13 Trojan.Diple 10.6.198.221 critical 0 4 0 2019-01-27 07:47:45 Trojan.Dimnie 10.7.33.182 critical 0 4 0 2019-01-26 20:51:31 Trojan.Koceg 10.7.41.58 critical 0 2 0 2019-01-26 21:44:56 Miner.Ufasoft 10.7.41.210 critical 0 6 0 2019-01-27 09:16:26 Trojan.NaviPromo 10.7.152.211 critical 0 2 0 2019-01-26 20:46:22 Trojan.NaviPromo 10.7.175.74 minor 0 3 0 2019-01-26 21:25:45 Trojan.Ngrbot.DNS 10.7.207.42 critical 0 2 0 2019-01-27 04:29:38 Trojan.ZeroAccess 10.8.58.151 minor 2 0 0 2019-01-27 09:04:39 Exploit.Kit.Redirect 10.8.138.246 minor 1 0 0 2019-01-26 18:41:05 Exploit.Kit.Malvertisement 10.8.188.70 critical 0 2 0 2019-01-27 03:59:27 Trojan.Dimnie ...
User role
Admin
Command mode
Config and Enable
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Malware Analysis: Before release 6.4.
Central Management System: Before release 6.4.
File Protect: Before release 6.4.
Network Security: Before release 6.4.