log client-reputation-report
Use these commands to control client-reputation log actions.
Syntax
To accept a host so that it has its own baselines
execute log client-reputation-report accept <policy-id> <host>
To clear all auto-profile data
execute log client-reputation-report clear
To ignore a host, removing it from the abnormal list
execute log client-reputation-report ignore <policy-id> <host>
To refresh the data of one option result
execute log client-reputation-report refresh <policy-id> <option> <action>
<option>
is one of bandwidth
, session
, failconn
, geo
, or app
<action>
is one of data
, baseline
, or data_baseline
(both data and baseline)
To get baseline/average information of one option
execute log client-reputation-report result baseline <policy-id> <option>
<option>
is one of bandwidth
, session
, or failconn
To get hourly data of a host visiting a country or using an application
execute log client-reputation-report result details {hourly | total} <policy-id> <option> <name> <host>
<option>
is geo
or app
<name>
is the name of the country or application
To list abnormal hosts of one or all options
execute log client-reputation-report result list <policy-id> <option>
<option>
is geo
, app
, or all
To list periodical data of one host of one option
execute log client-reputation-report result period <policy-id> <option> <host> <periods>
<option>
is one of bandwidth
, session
, failconn
, geo
, or app
<periods>
is number of periods to list
To list the top 10 abnormal hosts of one option
execute log client-reputation-report result top10 <policy-id> <option>
<option>
is one of bandwidth
, session
, failconn
, geo
, or app
To run reports immediately
execute log client-reputation-report run <policy-id>