Cisco Cisco Firepower Management Center 4000 Entwickleranleitung
2-37
FireSIGHT eStreamer Integration Guide
Chapter 2 Understanding the eStreamer Application Protocol
Understanding Metadata
Metadata Transmission
If the request message specifies metadata, eStreamer sends the relevant metadata record before it sends
any related event records.
any related event records.
eStreamer keeps track of the metadata it has sent to the client and does not resend the same metadata
record. The client should cache each received metadata record. eStreamer does not keep a history of
metadata transmissions from one session to the next, so when a new session starts and a request message
specifies metadata, eStreamer restarts metadata streaming from scratch.
record. The client should cache each received metadata record. eStreamer does not keep a history of
metadata transmissions from one session to the next, so when a new session starts and a request message
specifies metadata, eStreamer restarts metadata streaming from scratch.