Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
5-17
FireSIGHT System Database Access Guide
Chapter 5 Schema: Statistics Tracking Tables
url_reputation_stats_current_timeframe
url_reputation_stats_current_timeframe
The
url_reputation_stats_current_
timeframe
tables contain statistics on the bandwidth usage and
connections associated with requests to URLs with specified reputations. Query results can also be
constrained on the managed device that monitored the traffic.
constrained on the managed device that monitored the traffic.
For an understanding of the
current_day
,
current_month
, and
current_year
statistics tables, see
.
For more information on the
url_reputation_stats_current_
timeframe
tables, see the following
sections:
•
•
•
url_reputation_stats_current_timeframe Fields
The following table describes the fields you can access in the
url_category_stats_current_
timeframe
tables.
Table 5-14
url_reputation_stats_current_timeframe Fields
Field
Description
bytes_in
The bytes of inbound traffic during the specified interval.
bytes_out
The bytes of outbound traffic during the specified interval.
connections_allowed
The number of connections allowed.
connections_denied
The number of connections denied due to violation of an access control policy.
reputation
The risk associated with the requested URL. One of the following:
•
High risk
•
Suspicious site
•
Benign site with security risks
•
Benign site
•
Well known
•
Risk unknown
sensor_address
The IP address of the managed device that monitored the traffic. Format is
ipv4_address,ipv6_address
.
sensor_id
Internal identification number of the managed device that monitored the traffic.
sensor_name
The name of the managed device that monitored the traffic.
sensor_uuid
A unique identifier for the managed device, or
0
if
sensor_name
is
null
.
start_time_sec
The UNIX timestamp of the start of the measurement interval. For information on
specifying the start time, see
specifying the start time, see
.