The sensor's event store has a small fixed size and will wrap after so many messages, but if the event is still in the event store you can find it with the CLI command:
show event alert past 23:59 begin (IP Address)
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.