Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Seite von 102
 
3-4
FireSIGHT System Host Input API Guide
 
Chapter 3      Using the Host Input Import Tool 
  Writing Host Input Import Files
Host input import files must begin with the SetSource and SetMap commands, to provide an application 
source name and to set up third-party product name mappings for the imported data. For more 
information, see 
.
After the SetSource and SetMap commands, you can add additional command lines to the file. Each 
command line contains a single command with the parameters needed for that command and ends with 
a hard return. For more information on syntax for individual commands you can include, see the 
following sections:
  •
  •
  •
  •
  •
  •
  •
  •
To see an example of a complete import file and explanations of each section of the file, see 
.
Setting the Source Type
At the beginning of your import file, you must identify the source type for the data you plan to import. 
If you import scan results using this function, be sure to edit the source definition for the input source in 
your network discovery policy to set the identity source type to Scanner.
To set the source type:
Step 1
Add a line to your import file using the following syntax:
SetSourceType, Sourcetype
where 
SetSourceType
 is the name of the function and 
Sourcetype
 is the type of source you want to add 
or use for the imported data. (Valid values are 
2
 (scanner) or 
3
 (application).) 
If SetSourceType is not used, the default is type is 
3
 (application).
Setting the Source ID
At the beginning of your import file, you must set the source ID for the data you plan to import. 
To set the source application name:
Step 1
Add a line to your import file using the following syntax:
SetSource, SourceID
where 
SetSource
 is the name of the function and 
SourceID
 is the identification string you want to display 
as the source application for the imported data.