behavior
Loads the latest data created according to the behavior profile settings. This command is only available for the control node where the behavior profile data is located.
Syntax
behavior [OPTIONS] guid=PROFILE_GUID
Required Parameter
guid=PROFILE_GUID
- GUID of behavior profile
Optional Parameter
from=yyyyMMddHHmmss
- Start date and time of the search period in the form of
yyyyMMddHHmmss
(default: none). The time period for the search includes the specified time point. If you provide only the first part, the command recognizes the remaining digits as0
. For example, if you provide20130605
, the command recognizes it as20130605000000
(June 5, 2013, 00:00:00). to=yyyyMMddHHmmss
- End date and time of the search period in the form of
yyyyMMddHHmmss
(default: none). The time period for the search does not include the specified time point. The input format is the same asfrom
.
Description
The behavior
command loads the latest data created according to the behavior profile settings. You can use it for ad-hoc analysis or for the correlation by joining when detecting batch scenarios. A read lock is set on the behavior profile specified as the GUID while the command is being executed.