Cisco Cisco Firepower Management Center 2000 Guide Du Développeur

Event Device ID uint32

Identification number of the device that generated the event that 
triggered the correlation event. You can obtain device name by 
requesting Version 3 metadata. See 

 for more information.

Signature ID

uint32

If the event was an intrusion event, indicates the rule identification 
number that corresponds with the event. Otherwise, the value is 

0

. 

Signature 
Generator ID

uint32

If the event was an intrusion event, indicates the ID number of the 
FireSIGHT System preprocessor or rules engine that generated the 
event.

(Trigger) Event 
Second

uint32

UNIX timestamp indicating the time of the event that triggered the 
correlation policy rule (in seconds from 01/01/1970).

(Trigger) Event 
Microsecond

uint32

Microsecond (one millionth of a second) increment that the event was 
detected.

Event ID

uint32

Identification number of the event generated by the device.

Event Defined 
Mask

bits[32]

Set bits in this field indicate which of the fields that follow in the 
message are valid. See 

 for a list of each bit 

value.