Cisco Cisco Firepower Management Center 4000 Guía Del Desarrollador
2-16
FireSIGHT System Host Input API Guide
Chapter 2 Using the Host Input API
Host Input API Functions
Use the following key to delete an existing user server definition:
•
drop_user_product
If the
drop_user_product
value is set to 1, the existing user server definition is deleted from the host.
When you set a string value for a key in the hash, enclose that value in single quotes.
The following tables provide information on the keys you can use with the
$service
field.
Table 2-11
Keys for Server Identity
Key
Data Type
Definition
port
uint
Use this key in combination with the
proto
key and the address or attribute
specifications to specify the server on the hosts where you want to modify the
vulnerability listings.
vulnerability listings.
proto
string
Use this key in combination with the
port
key and the address or attribute
specifications to specify the server on the hosts where you want to modify the
vulnerability listings, using either the strings
vulnerability listings, using either the strings
tcp
or
udp
or the appropriate
protocol IDs
6
(tcp) or
17
(udp).
Table 2-12
Keys for Rendering
Key
Data Type
Definition
vendor_str
string
Use this key to supply the server vendor display name used by the
third-party application.
third-party application.
version_str
string
Use this key to supply the server version display name used by the
third-party application.
third-party application.
Table 2-13
Keys for Vulnerability Mapping
Key
Data Type
Definition
vendor_id
uint32
Use this key to supply the third-party server vendor definition.
product_id
uint32
Use this key to supply the third-party server product definition.
service_name
uint32
The name of the server in the Cisco database.
To identify the server, you must include a value for either
service_name
or
service_id
. If neither is provided the server
will be listed as
unknown
. If a service_name is provided, the
system looks up the server ID. If no ID exists for the
service_name
value, the system creates an ID.
service_id
uint32
The ID of the server in the Cisco database.
major
uint32
Use this key to supply the Cisco server major version definition
to map to.
to map to.
minor
uint32
Use this key to supply the Cisco server minor version definition
to map to.
to map to.
revision
uint32
Use this key to supply the Cisco server revision string to map to.
to_major
uint32
Use this key to set the last version number of the Cisco server
major version range to map to.
major version range to map to.