Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

The following table describes the joins you can perform on the 

 table.

The following query returns 25 malware events associated with the specified user, sorted by 

timestamp

 

in ascending order.

SELECT event_id, timestamp, src_ipaddr, dst_ipaddr, username, cloud_name, event_type, 

event_subtype, event_description, detection_name, detector_type, file_name, 

parent_file_name 

FROM fireamp_event 

WHERE username="username" ORDER BY timestamp ASC 

LIMIT 25;

The 

 table contains information on health events generated by the FireSIGHT System.

For more information, see the following sections:

The following table describes the database fields you can access in the 

 table.

dst_ipaddr

or

src_ipaddr

description

The description of the condition that caused the associated health module to generate the health 
event. For example, health events generated when a process was unable to execute are labeled 

Unable to Execute

.

event_time_sec

The UNIX timestamp of the date and time the Defense Center generated the health event.

id

The internal identification number for the event.

module_name

The name of the health module that generated the event.