Skip to main content
Command reference

security anti-ransomware volume entropy-stat show-recent-high-encryption-stat

Suggest changes
PDFs

Display the volume entropy recent high encryption stats

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

Description

The security anti-ransomware volume entropy-stat show-recent-high-encryption-stat command displays the intervals during which a high percentage of data was classified as encrypted using a data analysis algorithm. These intervals correspond to the reported attack timeline. This statistic is reset when the administrator runs the attack clear-suspect command.

Parameters

{ [-fields <fieldname>,…​]

If you specify the -fields <fieldname>, …​ parameter, the command output also includes the specified field or fields. You can use '-fields ?' to display the fields to specify.

| [-instance ] }

If you specify the -instance parameter, the command displays detailed information about all fields.

[-vserver <vserver name>] - Vserver Name

This parameter specifies the Vserver of the anti-ransomware enabled volume for which the entropy stats need to be displayed. If this parameter is specified, the command displays entropy stats only for the specified Vserver.

[-volume <volume name>] - Volume Name

This parameter specifies the anti-ransomware enabled volume for which the entropy stats need to be displayed. If this parameter is specified, the command displays entropy stats only for the specified Volume.

[-timestamp <MM/DD/YYYY HH:MM:SS>] - Start Time

This parameter specifies the start time of entropy stats collection interval. If this parameter is specified, only rows that match the specified input for timestamp will be displayed.

[-total-data-written {<integer>[KB|MB|GB|TB|PB]}] - Total Data Blocks written

This parameter specifies the amount of data written in the interval. If this parameter is specified, only rows that match the specified input for total-data-written will be displayed.

[-encryption-percentage <percent>] - Encryption Percentage

This parameter specifies the encryption percentage of the interval. If this parameter is specified, only rows that match the specified input for encryption-percentage will be displayed.

[-duration <time_interval>] - Duration of the interval

This parameter specifies the duration of the interval. If this parameter is specified, only rows that match the specified input for duration will be displayed.

Examples

The following example displays the recent high encryption stat information of a volume.

cluster1::> security anti-ransomware volume entropy-stat show-recent-high-encryption-stat -vserver vs1 -volume vol1
                                        Total     Encrypted
Vserver  Volume     Start Time          Duration  Data Written Data%
-------- ---------- ------------------- --------- ------------ ---------
vs0      vol1       1/21/2025 10:49:40  0h10m10s  3GB          55%
vs0      vol1       1/21/2025 11:10:43  0h10m58s  2GB          60%