Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

Seite von 102
 
3-13
FireSIGHT System Host Input API Guide
 
Chapter 3      Using the Host Input Import Tool
  Host Input Import Syntax
Client Application Functions
You can use the client application functions to modify client application data for hosts in the network 
map. 
For more information, see the following sections:
  •
  •
  •
AddClientApp
You can use the 
AddClientApp
 function to add client applications to existing hosts in the network map. 
If the client application name does not already exist in the Cisco database, the system creates a new entry 
for the client application. 
The client application identity displayed in a host profile is set by the highest priority source. Possible 
sources have the following priority order: user, scanner and application (set in the system policy), 
FireSIGHT, then NetFlow. Note that a new higher priority client application identity will not be override 
a current client application identity if it has less detail than the current identity. 
Use this syntax:
AddClientApp, ip_addressapp_nameapp_typeversion
DeleteClientApp
You can use the 
DeleteClientApp
 function to remove a client application from the specified host.
Use this syntax:
DeleteClientApp, ip_addressapp_nameapp_typeversion
Table 3-8
AddClientApp Fields 
Field
Description
Required
Values
ip_address
Indicates the string containing the 
IP address or addresses for the 
affected host or hosts.
Yes 
A comma-separated list of IP addresses, CIDR blocks, and 
ranges of IP addresses.
app_name
Indicates the client application 
name.
Yes
A string consisting of alphanumeric characters or spaces. 
For existing applications, corresponds to ID values in the 
database. The system looks up the ID to see if it matches an 
existing client application ID. If it does not, a new ID is 
created. 
app_type
This field is deprecated.
No
A null value.
version
Indicates the application version.
No
A string consisting of alphanumeric characters or spaces.