Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador
C H A P T E R
7-1
FireSIGHT System Database Access Guide
7
Schema: Connection Log Tables
This chapter contains information on the schema and supported joins for connection data.
For more information, see the sections listed in the following table. The Version column indicates the
Database Access versions supported by each listed table.
Database Access versions supported by each listed table.
connection_log
The
connection_log
table contains information on connection events. The FireSIGHT System generates
a connection event when a connection between a monitored host and any other host is established; the
event contains detailed information about the monitored traffic.
event contains detailed information about the monitored traffic.
The
connection_log
table supersedes the deprecated
rna_flow
table starting with Version 5.0 of the
FireSIGHT System.
For more information, see the following sections:
•
•
•
Table 7-1
Schema for Connection Log Tables
See...
For the table that stores information on...
Version
individual connections. Supersedes deprecated
table
table
rna_flow
.
5.0+
connection log summaries. Supersedes deprecated
table
table
rna_flow_summary
.
5.0+
individual connections. Used for security
intelligence.
intelligence.
5.3+