Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 180
 
6-61
FireSIGHT System Database Access Guide
 
Chapter 6      Schema: Discovery Event and Network Map Tables
  user_ipaddr_history
user_ipaddr_history Fields
The following table describes the fields you can access in the 
user_ipaddr_history
 table.
Table 6-57
user_ipaddr_history Fields 
Field
Description
end_time_sec
The UNIX timestamp of the date and time the FireSIGHT System detected a different user 
logging into the host, marking the assumed end of the previous user’s session. Note that 
the FireSIGHT System does not detect logoffs.
id
An internal identification number for the user history record.
ipaddr
A binary representation of the IP address of the host.
start_time_sec
The UNIX timestamp of the date and time the FireSIGHT System detected the user logging 
into host.
user_dept
The department of the user.
user_email
The email address of the user.
user_first_name
The first name of the user.
user_id
An internal identification number for the user.
user_last_name
The last name of the user.
user_last_seen_sec
The UNIX timestamp of the date and time the FireSIGHT System last detected user 
activity for the user.
user_last_updated_sec
The UNIX timestamp of the date and time the FireSIGHT System last updated the user 
record for the user.
user_name
The user name of the user.
user_phone
The phone number of the user.
user_rna_service
Name of the application protocol being used when the user was detected, if available.