# Anomaly/Attack Top N

#### Function

The Anomaly/Attack Top N report displays top N Zones or IP addresses by anomaly/attack count or by anomaly/attack duration.

#### Parameter

When the report type is set to Zone Anomaly/Attack Top N, the parameters described in Table 1 are displayed.

Table 1 Query parameters of Zone Anomaly/Attack Top N
Parameter | Description
--- | ---
Direction | Select Inbound or Outbound the drop-down list.
Device | Select a device from the drop-down list.
Time | Click to select the start time and end time of statistics. Or you can change the time values in corresponding text boxes. The end time should be later than the start time and the interval cannot be longer than one year.
Top N | Enter the value of N.

When the report type is set to IP Anomaly/Attack Top N, the parameters described in Table 2 are displayed.

Table 2 Query parameters of IP Anomaly/Attack Top N
Parameter | Description
--- | ---
Direction | Select Inbound or Outbound the drop-down list.
Device | Select a device from the drop-down list.
Zone | Click , select a Zone on the Zone page that is displayed, and then click OK.
Time | Click to select the start time and end time of statistics. Or you can change the time values in corresponding text boxes. The end time should be later than the start time and the interval cannot be longer than one year.
Top N | Enter the value of N.

#### Example

If the device is DDoS-Cleaning, Figure 1 shows IP Anomaly/Attack Top N within a period of time.

Figure 1 IP Anomaly/Attack Top N

#### Procedure

1. Choose Report > Report > Anomaly/Attack Analysis.
2. Click the Anomaly/Attack Top N tab.
3. Set query parameters.
4. Click Search.

   Top N Zones by anomalies or attacks that meet the query conditions are displayed.

5. Optional: Open or save the query results as files, or send queried reports to the specified email address.

   - Click to open or save the query results as PDF files. A maximum of 10,000 entries can be displayed.
   - Click to open or save the query results as EXCEL files. A maximum of 10,000 entries can be displayed.
   - Click to enter a recipient mail address and select an attachment format. Then click OK.

Parent topic: Anomaly/Attack Analysis

Copyright © Huawei Technologies Co., Ltd.