Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 180
C H A P T E R
 
7-1
FireSIGHT System Database Access Guide
 
7
Schema: Connection Log Tables
This chapter contains information on the schema and supported joins for connection data.
For more information, see the sections listed in the following table. The Version column indicates the 
Database Access versions supported by each listed table.
connection_log
The 
connection_log
 table contains information on connection events. The FireSIGHT System generates 
a connection event when a connection between a monitored host and any other host is established; the 
event contains detailed information about the monitored traffic.
The 
connection_log 
table supersedes the deprecated 
rna_flow
 table starting with Version 5.0 of the 
FireSIGHT System.
For more information, see the following sections:
  •
  •
  •
Table 7-1
Schema for Connection Log Tables 
See...
For the table that stores information on...
Version
individual connections. Supersedes deprecated 
table 
rna_flow
.
5.0+
connection log summaries. Supersedes deprecated 
table 
rna_flow_summary
.
5.0+
individual connections. Used for security 
intelligence.
5.3+