Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
5-11
FireSIGHT System Database Access Guide
Chapter 5 Schema: Statistics Tracking Tables
session_stats_current_timeframe
session_stats_current_timeframe Fields
The following table describes the fields you can access in the
session_stats_current_
timeframe
tables.
All tables of this type contain the same fields.
session_stats_current_timeframe Joins
You cannot perform joins on the
session_stats_current_
timeframe
tables.
session_stats_current_timeframe Sample Query
The following query returns the number of denied and allowed connections for each sensor, in
descending order by
descending order by
sensor_name
during the current day.
SELECT sensor_name, connections_denied, connections_allowed
FROM session_stats_current_day
ORDER BY sensor_id DESC;
Table 5-9
session_stats_current_timeframe Fields
Field
Description
bytes_in
The bytes of inbound traffic during the specified interval.
bytes_out
The bytes of outbound traffic during the specified interval.
connections_allowed
The number of connections allowed for the specified URL category.
connections_denied
The number of connections denied for the specified URL category due to
violation of an access control policy.
violation of an access control policy.
id
This field is not used and will always return
0
.
sensor_address
The IP address of the managed device that generated the event. Format is
ipv4_address,ipv6_address
.
sensor_id
ID of the device that provided the event.
sensor_name
The name of the managed device that generated the intrusion event.
sensor_uuid
A unique identifier for the managed device, or
0
if
sensor_name
is
null
.
start_time_sec
The UNIX timestamp of the date and time the measurement interval starts.
For detailed information, see
For detailed information, see
.