Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

The following query returns up to 10 file events with the application name, connection information, and 
file name, where the disposition is not 

CLEAN

.

SELECT file_event.application_name, file_event.connection_sec, file_event.counter, 

file_event.file_name 

FROM file_event

WHERE file_event.disposition != ‘CLEAN’ limit 10;