Cisco Cisco Firepower Management Center 4000 Entwickleranleitung
3-26
FireSIGHT System Host Input API Guide
Chapter 3 Using the Host Input Import Tool
Example Host Input Import File
Example: Adding a Host
After the file sets the source application name and third-party product map, commands to import data
follow. The first import function called is the
follow. The first import function called is the
AddHost
function:
# Add an IP host with no Primary MAC
#
AddHost,1.2.3.4
Note that the IP address for the added host is
1.2.3.4
and no primary MAC address is set for the host.
Example: Adding a Protocol to the Host
The next command in the import file adds the
ospf
protocol to the
1.2.3.4
host:
# Add the ospf protocol to the host
#
AddProtocol, 1.2.3.4,,ospf,xport
Note that the protocol type for the protocol is
xport
.
Example: Adding a Server to the Host
The next command in the import file uses the
AddService
function to add the
OpenSSH
server to the
1.2.3.4
host:
# Add a server for the host
#
AddService,1.2.3.4, 22, tcp, ssh, OpenSSH, 4.1
Note that the command sets the port to
22
, the protocol to
tcp
, the server type to
ssh
, the vendor display
string to
OpenSSH
, and the version display string to
4.1
.
Example: Setting the Operating System
The import file next sets the operating system value for the host using the
SetOS
command. The
Asset
Management App
map set contains a product map mapping the third-party product name
Microsoft
Win2K
to the Cisco product definition for Microsoft Windows 2000 SP3: