Cisco Cisco Firepower Management Center 4000 Entwickleranleitung

3-19

FireSIGHT System Host Input API Guide

Chapter 3 Using the Host Input Import Tool

Host Input Import Syntax

Use this syntax:

SetAttributeValue, ip_address, attribute, value

DeleteAttributeValue

You can use the

DeleteAttributeValue

function to remove an attribute value for a host.

Use this syntax:

DeleteAttributeValue, ip_address, attribute, value

Vulnerabilities Functions

You can use the vulnerabilities functions to update the status of vulnerabilities on a host.

For more information, see the following sections:

•

SetInvalidVulns, page 3-19

•

SetValidVulns, page 3-20

SetInvalidVulns

You can use the

SetInvalidVulns

function to deactivate vulnerabilities on a host or set of hosts. For the

function call to be effective, the vulnerability must exist on the host and be set to valid.

Table 3-15

SetAttributeValue Fields

Field

Description

Required

Values

ip_address

Indicates the string
containing the IP address or
addresses for the affected
host or hosts.

Yes

A comma-separated list of IP addresses, CIDR blocks,
and ranges of IP addresses.

attribute

Indicates the host attribute
name.

Yes

Valid attribute names consisting of alphanumeric
characters or spaces.

value

Indicates the host attribute
value.

Yes

Valid attribute values for the named attribute, consisting
of alphanumeric characters or spaces. If a value is passed
in for a list attribute, the value must be an existing named
value for the list attribute.

Table 3-16

DeleteAttributeValue Fields