See last time an ACL rule was hit from FTD CLI

[sjhloco]

Hi,

I am trying to workout a way to find the the last hit time for all the ACL rules on an FTD from the CLI. In ASAs you can use the show access-list all_name brief command and match the hashes from that with the hashes of the ACEs in an ACL to get the last time (unix-time format) an ACE was hit. This command does not seem to exist on FTDs, does anyone know if there is an equivalent command or any way to do this in FTD? 

Thanks

[Chakshu Piplani]

Can you try this:

> system support diagnostic-cli

FTD67> en
Password:  <hit enter>
FTD67#

FTD67# show rule hits         

RuleID               Hit Count           First Hit Time(UTC)     Last Hit Time(UTC)       
--------------------------------------------------------------------------------------
268434432            3267                16:58:32 Apr 18 2021     09:02:56 May 6 2021     
268434434            51479               16:54:58 Apr 18 2021     09:09:57 May 6 2021     

Regards,

Chakshu

Do rate helpful posts!

[sjhloco]

Thanks for the response. The show rule hits doesn't work but by going into system support diagnostic-cli I can now run show access-list all_name brief and get the information I need,

thanks