Command - Anomalies

Command Line Interface

Anomalies

Description

Shows the anomalies associated with a specific domain (e.g. domain.name.com). Unless otherwise specified through the Options, results related to the last 60 minutes are shown.

Syntax

anomalies [--help] [--start START] [--end END] [--last-minutes M] [--last-hours H] [--today] [--all-dates] [--clients [ADDRESS [ADDRESS ...]]] [--only-from-private-networks] [--exclude-private-network-anomalies] [--paginate] [--csv] [--unix-timestamps] [--count]}} domain.name.com

Options

  • --all-dates Select a time interval corresponding to all available dates. Overrides --start, --end and any less restrictive time interval setting.
  • --clients [ADDRESS [ADDRESS ...]] Limit the query to alerts originating from the specified set of client IPs or networks. Examples of valid values and search patterns: 192.168.1.1 192.168.1.* 192.168.1.0/24
  • --count If present, the number of rows resulting from the query will be displayed, overriding all table formatting instructions.
  • --csv Generate tabular output in standard CSV format.
  • --end END Specify a maximum value for the time interval. Format: YYYY-MM-DD-hh:mm:ss.ffffff
  • --exclude-private-network-alerts Limit the query to alerts originating from at least one nonprivate address.
  • --help Show this help message.
  • --last-hours H select a time interval corresponding to the last H hours. Overrides --start, --end and any less restrictive time interval setting.
  • --last-minutes M select a time interval corresponding to the last M minutes. Overrides --start, --end and any less restrictive time interval setting.
  • --only-from-private-network Limit the query to alerts originating from private networks.
  • --paginate Allow the pagination of output text.
  • --start START Specify a minimum value for the time interval. Format: YYYY-MM-DD-hh:mm:ss.ffffff
  • --today Select a time interval corresponding to the time elapsed since midnight on the current date. Overrides --start,--end and any less restrictive time interval setting.
  • --unix-timestamps Show timestamps in standard UNIX format.