Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Seite von 180
C H A P T E R
 
2-1
FireSIGHT System Database Access Guide
 
2
Setting Up Database Access
To obtain read-only access to the database, you must first configure the appliance to allow access. Then, 
you must configure your client system to connect to the appliance by downloading the JDBC driver and 
accepting the SSL certificate from the appliance you want to access. Finally, you must configure your 
reporting application to connect to the appliance.
Note
Before you set up database access, you should make sure you have fulfilled the prerequisites described 
in 
For more information, see the following sections:
  •
  •
  •
  •
  •
  •
  •
  •
  •
Deciding Which Appliance to Access
You can connect to multiple appliances with a single client, but you must configure each appliance 
individually to allow access. 
To decide which appliance or appliances to connect to, keep in mind that the available data on the 
appliance depends on the licenses you have installed, and on your configuration of the FireSIGHT 
System.
The following list outlines some of the specific reasons why a query may not return results:
  •
Your query is too specific. For example, you may need to adjust the time range or IP address range 
of a query.
  •
Not all of the fields for an event may be populated, depending on the network traffic that caused an 
event to be generated. For example, not all connection events contain payload information.