Cisco Cisco Firepower Management Center 4000 Entwickleranleitung
3-12
FireSIGHT System Host Input API Guide
Chapter 3 Using the Host Input Import Tool
Host Input Import Syntax
UnsetService
You can use the
UnsetService
function to remove user-added server definitions from a specified host.
UnsetService
does not remove any server definitions detected through FireSIGHT.
Note
If the number of servers stored in the network map for a specific host exceeds 100, new server
information is ignored until servers are deleted from the host.
information is ignored until servers are deleted from the host.
Use this syntax:
UnsetService, ip_address, port, proto
DeleteService
You can use the
DeleteService
function to remove a server from a specified host. You must specify the
port and protocol of the server you want to delete.
Use this syntax:
DeleteService, ip_address, port, proto
Table 3-6
UnsetService Fields
Field
Description
Required Values
ip_address
Indicates the string containing the IP
address or addresses for the affected host or
hosts.
address or addresses for the affected host or
hosts.
Yes
A comma-separated list of IP addresses, CIDR
blocks, and ranges of IP addresses.
blocks, and ranges of IP addresses.
port
Use this field in combination with the
ip_address
and
proto
fields to specify the
server to be removed on the hosts where it
should be removed.
should be removed.
Yes
Integers in the range of 1-65535.
proto
Use this field in combination with the
ip_address
and
port
fields to specify the
server to be removed on the hosts where it
should be removed.
should be removed.
Yes
Either the strings
tcp
or
udp
or the appropriate
protocol IDs
6
(tcp) or
17
(udp).
Table 3-7
DeleteService Fields
Field
Description
Required Values
ip_address
Indicates the string containing the IP address or
addresses for the affected host or hosts.
addresses for the affected host or hosts.
Yes
A comma-separated list of IP addresses, CIDR
blocks, and ranges of IP addresses.
blocks, and ranges of IP addresses.
port
Use this field in combination with the
ip_address
and
proto
fields to specify the
server to be deleted on the hosts where it should
be deleted.
be deleted.
Yes
Integers in the range of 1-65535.
proto
Use this field in combination with the
ip_address
and
port
fields to specify the server
to be deleted on the hosts where it should be
deleted.
deleted.
Yes
Either the strings
tcp
or
udp
or the appropriate
protocol IDs
6
(tcp) or
17
(udp).