The sensor's event store has a small fixed size and will wrap after so many messages, but if the event is still in the event store you can find it with the CLI command:
show event alert past 23:59 begin (IP Address)
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: