Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 180
 
5-8
FireSIGHT System Database Access Guide
 
Chapter 5      Schema: Statistics Tracking Tables 
  geolocation_stats_current_timeframe
geolocation_stats_current_timeframe Fields
The following table describes the fields you can access in the 
geolocation_stats_current_
timeframe
 
tables. All tables of this type contain the same fields.
Table 5-7
geolocation_stats_current_timeframe Fields 
Field
Description
bytes_from
The total number of bytes transmitted by the session responder.
bytes_to
Total number of bytes transmitted by the session initiator.
destination_continent
The name of the continent of the destination host.
**
 - Unknown
na
 - North America
as
 - Asia
af
 - Africa
eu
 - Europe
sa
 - South America
au
 - Australia
an
 - Antarctica
destination_country
Code for the country of the destination host.
flows_allowed
The number of flows allowed.
flows_denied
The number of flows denied due to violation of an access control policy.
sensor_address
The IP address of the managed device that generated the event. Format is 
ipv4_address,ipv6_address
.
sensor_id
ID of the device that provided the event.
sensor_name
The name of the managed device that generated the intrusion event.
sensor_uuid
A unique identifier for the managed device, or 
0
 if 
sensor_name
 is 
null
.
source_continent
The name of the continent of the source host.
**
 - Unknown
na
 - North America
as
 - Asia
af
 - Africa
eu
 - Europe
sa
 - South America
au
 - Australia
an
 - Antarctica
source_country
Code for the country of the source host.
start_time_sec
The UNIX timestamp of the date and time the measurement interval starts. 
For detailed information, see 
.