Cisco Cisco Firepower Management Center 2000 Entwickleranleitung

Event stream requests use a simple process:

Your client sends a request message to the eStreamer service with a start date and time and a request 
flag field that specifies the events and their version level to be included in the data stream.

eStreamer streams events beginning at the specified time. For information about the streaming 
protocol, see 

.

For information on the format and content of the client’s Event Stream request message, see 

.

For information on the event types and versions of events that the client can request, see 

.

If you set bit 30 in the request flags field of an Event Stream Request message, you initiate an extended 
request, which starts a negotiation with the server. Extended request flags must be sent if this bit is set. 
For the event types available by extended request, see 

The steps for extended requests are as follows:

Your client sends an Event Streaming Request message to eStreamer with the request flags bit 30 
set to 1, which signals an extended request. See 

for message format details.

eStreamer answers with a Streaming Information message that advertises the list of services 
available to the client. For details about the Streaming Information message, see 

The client returns a Streaming Request message that indicates the service it wants to use, with a 
request list of event types and versions available from that service. The request list corresponds to 
setting bits in the request flag field when making a standard event stream request. For details about 
how to use the Streaming Request message to request events, see 

.

eStreamer processes the client’s Streaming Request message and begins streaming the data at the 
time specified in the message. For information about the streaming protocol, see 

Once you have established a session, you can submit a request for host data at any time. eStreamer 
generates information for the requested hosts from the FireSIGHT System network map.

To change request parameters for an established session, the client must disconnect and request a new 
session.