Cisco Cisco Firepower Management Center 2000 Guía Del Desarrollador
3-13
FireSIGHT System Host Input API Guide
Chapter 3 Using the Host Input Import Tool
Host Input Import Syntax
Client Application Functions
You can use the client application functions to modify client application data for hosts in the network
map.
map.
For more information, see the following sections:
•
•
•
AddClientApp
You can use the
AddClientApp
function to add client applications to existing hosts in the network map.
If the client application name does not already exist in the Cisco database, the system creates a new entry
for the client application.
for the client application.
The client application identity displayed in a host profile is set by the highest priority source. Possible
sources have the following priority order: user, scanner and application (set in the system policy),
FireSIGHT, then NetFlow. Note that a new higher priority client application identity will not be override
a current client application identity if it has less detail than the current identity.
sources have the following priority order: user, scanner and application (set in the system policy),
FireSIGHT, then NetFlow. Note that a new higher priority client application identity will not be override
a current client application identity if it has less detail than the current identity.
Use this syntax:
AddClientApp, ip_address, app_name, app_type, version
DeleteClientApp
You can use the
DeleteClientApp
function to remove a client application from the specified host.
Use this syntax:
DeleteClientApp, ip_address, app_name, app_type, version
Table 3-8
AddClientApp Fields
Field
Description
Required
Values
ip_address
Indicates the string containing the
IP address or addresses for the
affected host or hosts.
IP address or addresses for the
affected host or hosts.
Yes
A comma-separated list of IP addresses, CIDR blocks, and
ranges of IP addresses.
ranges of IP addresses.
app_name
Indicates the client application
name.
name.
Yes
A string consisting of alphanumeric characters or spaces.
For existing applications, corresponds to ID values in the
database. The system looks up the ID to see if it matches an
existing client application ID. If it does not, a new ID is
created.
database. The system looks up the ID to see if it matches an
existing client application ID. If it does not, a new ID is
created.
app_type
This field is deprecated.
No
A null value.
version
Indicates the application version.
No
A string consisting of alphanumeric characters or spaces.