Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

 describes how to perform queries on data 

stored in formats that may be unfamiliar (including UNIX timestamps and IP addresses) so your 
queries are successful and your results appear as expected.

 contains recommendations on constraining 

your queries so as not to degrade the performance of the FireSIGHT System.

 contains tips for querying intrusion events across several appliances.

For schema information and allowed joins, see the following chapters: 

 

 

 

 

The 

 statement lists all tables in the Cisco database. The following represents the supported MySQL 

 statement syntax you can use when querying the Cisco database:

SHOW TABLES;

Any 

statement syntax not listed above is not supported.

The Cisco database offers limited use of the 

DESCRIBE

 statement. In the Cisco database, the output of the 

DESCRIBE

 statement only lists the names of the columns and the type of data in each column. The 

following represents the supported MySQL 

DESCRIBE

 statement syntax you can use when querying the 

Cisco database: 

DESCRIBE table_name;

The Cisco database also supports the identical command 

DESC

: 

DESC table_name;

Any 

DESCRIBE

 statement syntax not listed above is not supported. In particular, the FireSIGHT System 

database access feature does not support:

the 

INDEX

 

FOR

 clause 

the 

TABLE

 clause

the 

PROCEDURE

 clause

the name of a table you are querying