behavior

Loads the latest data created according to the behavior profile settings. This command is only available for the control node where the behavior profile data is located.

Syntax

behavior [OPTIONS] guid=PROFILE_GUID
Required Parameter
guid=PROFILE_GUID
GUID of behavior profile
Optional Parameter
from=yyyyMMddHHmmss
Start date and time of the search period in the form of yyyyMMddHHmmss (default: none). The time period for the search includes the specified time point. If you provide only the first part, the command recognizes the remaining digits as 0. For example, if you provide 20130605, the command recognizes it as 20130605000000 (June 5, 2013, 00:00:00).
to=yyyyMMddHHmmss
End date and time of the search period in the form of yyyyMMddHHmmss (default: none). The time period for the search does not include the specified time point. The input format is the same as from.

Description

The behavior command loads the latest data created according to the behavior profile settings. You can use it for ad-hoc analysis or for the correlation by joining when detecting batch scenarios. A read lock is set on the behavior profile specified as the GUID while the command is being executed.