Cisco Cisco Firepower Management Center 2000 Entwickleranleitung
2-11
FireSIGHT System Database Access Guide
Chapter 2 Setting Up Database Access
Querying the Database
•
describes how to perform queries on data
stored in formats that may be unfamiliar (including UNIX timestamps and IP addresses) so your
queries are successful and your results appear as expected.
queries are successful and your results appear as expected.
•
contains recommendations on constraining
your queries so as not to degrade the performance of the FireSIGHT System.
•
contains tips for querying intrusion events across several appliances.
For schema information and allowed joins, see the following chapters:
•
•
•
•
•
•
•
Supported SHOW Statement Syntax
The
SHOW
statement lists all tables in the Cisco database. The following represents the supported MySQL
SHOW
statement syntax you can use when querying the Cisco database:
SHOW TABLES;
Any
SHOW
statement syntax not listed above is not supported.
Supported DESCRIBE or DESC Statement Syntax
The Cisco database offers limited use of the
DESCRIBE
statement. In the Cisco database, the output of the
DESCRIBE
statement only lists the names of the columns and the type of data in each column. The
following represents the supported MySQL
DESCRIBE
statement syntax you can use when querying the
Cisco database:
DESCRIBE table_name;
The Cisco database also supports the identical command
DESC
:
DESC table_name;
Any
DESCRIBE
statement syntax not listed above is not supported. In particular, the FireSIGHT System
database access feature does not support:
•
the
INDEX
FOR
clause
•
the
TABLE
clause
•
the
PROCEDURE
clause
Table 2-3
Supported DESCRIBE Statement Syntax
Where...
Is...
table_name
the name of a table you are querying