Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

This chapter contains information on the schema and supported joins for system-level functions, 
including auditing, appliance health monitoring, malware detection, and logging of security updates.

For more information, see the sections listed in the following table.

The 

 table contains information on FireSIGHT System users’ interactions with the web 

interface. Keep in mind that the audit log stores records for the local appliance only, not for managed 
appliances.

For more information, see the following sections:

The following table describes the database fields you can access in the 

 table.

User interactions with the appliance’s web interface.

4.10.x+

FireAMP malware detection and quarantine events.

5.1+

Health status events for monitored appliances.

4.10.x+

Rule updates that have been imported on your appliances.

5.0+

action_time_sec

The UNIX timestamp of the date and time the appliance generated the audit record.

message

The action the user performed.

source

The IP address of the web interface user’s host, in dotted-decimal notation.