Cisco Cisco Firepower Management Center 2000 Guia Do Programador

Página de 180
 
5-14
FireSIGHT System Database Access Guide
 
Chapter 5      Schema: Statistics Tracking Tables 
  transmission_stats_by_file_type_current_timeframe
storage_stats_by_file_type_current_timeframe Joins
You cannot perform joins on the 
session_stats_current_
timeframe
 tables.
storage_stats_by_file_type_current_timeframe Sample Query
The following query returns the number of dropped and stored files for each sensor, in descending order 
by 
file_type
 during the current day.
SELECT sensor_name, number_dropped, number_stored, file_type
FROM storage_stats_by_file_type_current_day
ORDER BY file_type DESC;
transmission_stats_by_file_type_current_timeframe
The 
transmission_stats_by_file_type_current_
timeframe
 tables contain statistics for stored files by 
file type. Statistics can be extracted based on bytes, connection, sensor, and time.
For an understanding of the 
current_day
current_month
, and 
current_year
 statistics tables, see 
.
For more information on the 
transmission_stats_by_file_type_current_
timeframe
 tables, see the 
following sections:
  •
  •
  •
transmission_stats_by_file_type_current_timeframe Fields
The following table describes the fields you can access in the 
storage_stats_by_file_type_current_
timeframe
 tables. All tables of this type contain the same fields.
sensor_uuid
A unique identifier for the managed device, or 
0
 if 
sensor_name
 is 
null
.
start_time_sec
The UNIX timestamp of the date and time the measurement interval starts. 
For detailed information, see 
.
Table 5-11
storage_stats_by_file_type_current_timeframe Fields (continued)
Field
Description
Table 5-12
transmission_stats_by_file_type_current_timeframe Fields 
Field
Description
bytes_sent
The number of transmitted bytes.
file_type
The file type of the detected or quarantined file.
file_type_id
ID number that maps to the file type.