Displays the detailed statistics for the malware submission jobs that were analyzed during a specified time period.
Note
The fields for the total number of remote submissions are displayed only on a Network Security sensor or sensor-enabled integrated appliance, or an EX Series appliance that is operating in MVX "hybrid" mode.
The fields for the total number of running submissions and the total number of dynamic analysis (DA) submissions are displayed only on an integrated Network Security appliance or an EX Series appliance that is operating in MVX "integrated" (local) mode.
The URLs that are submitted for analysis on a Network Security sensor or sensor-enabled integrated appliance are given higher priority than suspicious or malicious objects.
Syntax
show submission from <start_date> <start_time> to <end_date> <end_time>
Parameters
start_date
Display the statistics for the malware submission job starting from this date. Start date is specified in the format of yyyy/mm/dd.
start_time
Display the statistics for the malware submission job starting from this time. Start time is specified in the format of hh:mm:ss.
end_date
Display the statistics for the malware submission job ending om this date. End date is specified in the format of yyyy/mm/dd.
end_time
Display the statistics for the malware submission job ending at this time. End time is specified in the format of hh:mm:ss.
Output fields
The following table describes the output fields for the show submission from command. Fields are listed in the approximate order in which they appear in the output.
Field | Description |
|---|---|
Total queued submission | Total number of malware submissions that are in the queue waiting to be analyzed. |
Total remote submissions | Total number of malware submissions that are currently being analyzed remotely during a specified time period. |
Remote submissions (url) | Total number of malware submissions that are currently being analyzed remotely for URLs during a specified time period. |
Remote submissions (file) | Total number of malware submissions that are currently being analyzed remotely for files during a specified time period. |
Total running submissions | Total number of malware submissions that are currently being analyzed. |
Total DA running submissions | Total number of dynamic analysis (DA) submissions that are currently running. |
Submissions | Total number of malware submissions and the number submitted per minute during a specified time period. |
Submissions(url) | Total number of malware submissions and the number submitted per minute for URLs during a specified time period. |
Submissions(file) | Total number of malware submissions and the number submitted per minute for files during a specified time period. |
Completed submissions | Total number of malware submissions that were completed and the number submitted per minute during a specified time period. |
Completed submissions(url) | Total number of malware submissions that were completed and the number submitted per minute for URLs during a specified time period. |
Completed submissions(file) | Total number of malware submissions that were completed and the number submitted per minute for files during a specified time period. |
Malicious submission count | Total number of DA submissions that were detected as malicious and the number submitted per minute during a specified time period. |
URL Dynamic Analysis verified malicious count | Total number of DA submissions that were detected as malicious and the number submitted per minute for URLs during a specified time period. |
File Dynamic Analysis verified malicious count | Total number of DA submissions that were detected as malicious and the number submitted per minute for files during a specified time period. |
Remote Submissions Completed | Total number of malware submissions that were completed remotely and the number submitted per minute during a specified time period. |
Remote Malicious Submissions | Total number of malware submissions that were detected as malicious remotely and the number submitted during a specified time period. |
Examples
The following example displays the statistics of the malware submission jobs during a specified time period:
hostname # show submission from 2015/08/09 12:00:00 to 2015/08/12 12:00:00
Runtime Submission Stats:
Total queued submission : 78
Total running submissions : 72
Total DA running submissions : 96
Cumulative Stats in timespan 2015-08-09 12:00:00 to 2015-08-12 12:00:00
: Total : Rate/minute
Submissions : 259 : 0.060
Completed submissions : 259 : 0.060
Malicious submission count : 103 : 0.024
The following example displays the statistics of the malware submission jobs during a specified time period on a Network Security sensor or sensor-enabled integrated appliance:
hostname # show submission from 2017/08/27 12:22:05 to 2017/08/28 12:22:05
Runtime Submission Stats:
Total queued submission : 0
Queued submissions(url) : 0
Queued submissions(file) : 0
Remote Submissions
Total remote submissions : 7
Remote submissions(url) : 6
Remote submissions(file) : 1
Cumulative Stats in timespan 2017-08-27 12:22:05 to 2017-08-28 12:22:05
: Total : Rate/minute
Submissions : 733 : 0.509
Submissions(url) : 292 : 0.203
Submissions(file) : 441 : 0.306
Completed submissions : 707 : 0.491
Completed submissions(url) : 279 : 0.194
Completed submissions(file) : 428 : 0.297
Malicious submission count : 487 : 0.338
URL Dynamic Analysis verified malicious count : 171 : 0.119
File Dynamic Analysis verified malicious count : 316 : 0.219
Remote Submissions Completed : 556 : 0.386
Remote Malicious Submissions : 367 : 0.255
User role
Administrator, Monitor, or Analyst.
Command mode
Enable
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Malware Analysis: Release 7.7. The command output was enhanced to include the total number of remote malware submissions that were completed or detected as malicious in Release 8.0.
File Protect: Release 7.7. The command output was enhanced to include the total number of remote malware submissions that were completed or detected as malicious in Release 8.0.
Network Security: Release 7.7. The command output was enhanced to include the total number of remote submissions on a Network Security sensor or sensor-enabled integrated appliance in Release 7.9. The command output was enhanced to include the total number of remote malware submissions that were completed or detected as malicious on a Network Security sensor or sensor-enabled integrated appliance in Release 8.0.
Email Security — Server: Release 7.8