Cisco Cisco Firepower Management Center 4000 Entwickleranleitung
6-61
FireSIGHT System Database Access Guide
Chapter 6 Schema: Discovery Event and Network Map Tables
user_ipaddr_history
user_ipaddr_history Fields
The following table describes the fields you can access in the
user_ipaddr_history
table.
Table 6-57
user_ipaddr_history Fields
Field
Description
end_time_sec
The UNIX timestamp of the date and time the FireSIGHT System detected a different user
logging into the host, marking the assumed end of the previous user’s session. Note that
the FireSIGHT System does not detect logoffs.
logging into the host, marking the assumed end of the previous user’s session. Note that
the FireSIGHT System does not detect logoffs.
id
An internal identification number for the user history record.
ipaddr
A binary representation of the IP address of the host.
start_time_sec
The UNIX timestamp of the date and time the FireSIGHT System detected the user logging
into host.
into host.
user_dept
The department of the user.
user_email
The email address of the user.
user_first_name
The first name of the user.
user_id
An internal identification number for the user.
user_last_name
The last name of the user.
user_last_seen_sec
The UNIX timestamp of the date and time the FireSIGHT System last detected user
activity for the user.
activity for the user.
user_last_updated_sec
The UNIX timestamp of the date and time the FireSIGHT System last updated the user
record for the user.
record for the user.
user_name
The user name of the user.
user_phone
The phone number of the user.
user_rna_service
Name of the application protocol being used when the user was detected, if available.