Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Seite von 102
 
3-12
FireSIGHT System Host Input API Guide
 
Chapter 3      Using the Host Input Import Tool 
  Host Input Import Syntax
UnsetService
You can use the 
UnsetService
 function to remove user-added server definitions from a specified host. 
UnsetService
 does not remove any server definitions detected through FireSIGHT.
Note
If the number of servers stored in the network map for a specific host exceeds 100, new server 
information is ignored until servers are deleted from the host.
Use this syntax:
UnsetService, ip_addressportproto
DeleteService
You can use the 
DeleteService
 function to remove a server from a specified host. You must specify the 
port and protocol of the server you want to delete. 
Use this syntax:
DeleteService, ip_addressportproto
Table 3-6
UnsetService Fields 
Field
Description
Required Values
ip_address
Indicates the string containing the IP 
address or addresses for the affected host or 
hosts.
Yes 
A comma-separated list of IP addresses, CIDR 
blocks, and ranges of IP addresses.
port
Use this field in combination with the 
ip_address
 and 
proto
 fields to specify the 
server to be removed on the hosts where it 
should be removed. 
Yes
Integers in the range of 1-65535.
proto
Use this field in combination with the 
ip_address
 and 
port
 fields to specify the 
server to be removed on the hosts where it 
should be removed. 
Yes
Either the strings 
tcp
 or 
udp
 or the appropriate 
protocol IDs 
6
 (tcp) or 
17
 (udp).
Table 3-7
DeleteService Fields 
Field
Description
Required Values
ip_address
Indicates the string containing the IP address or 
addresses for the affected host or hosts.
Yes 
A comma-separated list of IP addresses, CIDR 
blocks, and ranges of IP addresses.
port
Use this field in combination with the 
ip_address
 and 
proto
 fields to specify the 
server to be deleted on the hosts where it should 
be deleted. 
Yes
Integers in the range of 1-65535.
proto
Use this field in combination with the 
ip_address
 and 
port
 fields to specify the server 
to be deleted on the hosts where it should be 
deleted. 
Yes
Either the strings 
tcp
 or 
udp
 or the appropriate 
protocol IDs 
6
 (tcp) or 
17
 (udp).