Get custom alerts from Quad Miners Network Blackbox.

profile=PROFILE

The identifier of Network Blackbox connect profile.

duration=NUM{mon|w|d|h|m|s}

Scan only recent sessions. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example, 10s means data from 10 seconds earlier.

from=yyyyMMddHHmmss

Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.

to=yyyyMMddHHmmss

End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.

src-ip=SRC-IP

Source IP address of target session.

dst-ip=DST-IP

Destination IP address of target session.

id=ID

Comma separated ID values.

Output Fields