Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador
5-16
FireSIGHT System Database Access Guide
Chapter 5 Schema: Statistics Tracking Tables
url_category_stats_current_timeframe
url_category_stats_current_timeframe Fields
The following table describes the fields you can access in the
url_category_stats_current_
timeframe
tables.
url_category_stats_current_timeframe Joins
You cannot perform joins on the
url_category_stats_current_
timeframe
tables.
url_category_stats_current_timeframe Sample Query
The following query returns up to 25 URL category records. Each record contains the bytes of associated
inbound and outbound traffic, as well as allowed and denied connections, over the specified time
interval.
inbound and outbound traffic, as well as allowed and denied connections, over the specified time
interval.
SELECT category, sensor_name, sensor_address, start_time_sec, bytes_in, bytes_out,
connections_allowed, connections_denied
FROM url_category_stats_current_year
WHERE category="Games"
LIMIT 0, 25;
Table 5-13
url_category_stats_current_timeframe Fields
Field
Description
bytes_in
The bytes of inbound traffic during the specified interval.
bytes_out
The bytes of outbound traffic during the specified interval.
category
The category of the URL.
connections_allowed
The number of connections allowed for the specified URL category.
connections_denied
The number of connections denied for the specified URL category due to violation
of an access control policy.
of an access control policy.
sensor_address
The IP address of the managed device that monitored the traffic. Format is
ipv4_address,ipv6_address
.
sensor_id
The internal identification number of the managed device that detected the traffic.
sensor_name
The managed device that monitored the traffic.
sensor_uuid
A unique identifier for the managed device, or
0
if
sensor_name
is
null
.
start_time_sec
The UNIX timestamp of the start of the measurement interval. For information on
specifying the start time, see
specifying the start time, see