Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador

Descargar
Página de 180
 
5-11
FireSIGHT System Database Access Guide
 
Chapter 5      Schema: Statistics Tracking Tables
  session_stats_current_timeframe
session_stats_current_timeframe Fields
The following table describes the fields you can access in the 
session_stats_current_
timeframe
 tables. 
All tables of this type contain the same fields.
session_stats_current_timeframe Joins
You cannot perform joins on the 
session_stats_current_
timeframe
 tables.
session_stats_current_timeframe Sample Query
The following query returns the number of denied and allowed connections for each sensor, in 
descending order by 
sensor_name
 during the current day.
SELECT sensor_name, connections_denied, connections_allowed
FROM session_stats_current_day
ORDER BY sensor_id DESC;
Table 5-9
session_stats_current_timeframe Fields 
Field
Description
bytes_in
The bytes of inbound traffic during the specified interval.
bytes_out
The bytes of outbound traffic during the specified interval.
connections_allowed
The number of connections allowed for the specified URL category.
connections_denied
The number of connections denied for the specified URL category due to 
violation of an access control policy.
id
This field is not used and will always return 
0
.
sensor_address
The IP address of the managed device that generated the event. Format is 
ipv4_address,ipv6_address
.
sensor_id
ID of the device that provided the event.
sensor_name
The name of the managed device that generated the intrusion event.
sensor_uuid
A unique identifier for the managed device, or 
0
 if 
sensor_name
 is 
null
.
start_time_sec
The UNIX timestamp of the date and time the measurement interval starts. 
For detailed information, se
.