Cisco Cisco Firepower Management Center 4000 Developer's Guide
6-24
FireSIGHT System Database Access Guide
Chapter 6 Schema: Discovery Event and Network Map Tables
rna_host_ioc_state
rna_host_ioc_state Joins
The following table describes the joins you can perform on the
rna_host_ioc_state
table.
rna_host_ioc_state Sample Query
The following query returns up to 25 hosts with their ioc within a specified timespan.
SELECT host_id, ioc_id
FROM rna_host_ioc_state
WHERE first_seen
BETWEEN UNIX_TIMESTAMP("2011-10-01 00:00:00")
AND UNIX_TIMESTAMP("2011-10-07 23:59:59")
ORDER BY ioc_id DESC
LIMIT 0, 25;
Table 6-19
rna_host_ioc_state Joins
You can join this table on...
And...
host_id