Cisco Cisco Firepower Management Center 2000 Guia Do Programador

Página de 180
 
5-16
FireSIGHT System Database Access Guide
 
Chapter 5      Schema: Statistics Tracking Tables 
  url_category_stats_current_timeframe
url_category_stats_current_timeframe Fields
The following table describes the fields you can access in the 
url_category_stats_current_
timeframe
 
tables.
url_category_stats_current_timeframe Joins
You cannot perform joins on the 
url_category_stats_current_
timeframe
 tables.
url_category_stats_current_timeframe Sample Query
The following query returns up to 25 URL category records. Each record contains the bytes of associated 
inbound and outbound traffic, as well as allowed and denied connections, over the specified time 
interval.
SELECT category, sensor_name, sensor_address, start_time_sec, bytes_in, bytes_out, 
connections_allowed, connections_denied 
FROM url_category_stats_current_year 
WHERE category="Games" 
LIMIT 0, 25;
Table 5-13
url_category_stats_current_timeframe Fields 
Field
Description
bytes_in
The bytes of inbound traffic during the specified interval.
bytes_out
The bytes of outbound traffic during the specified interval.
category
The category of the URL.
connections_allowed
The number of connections allowed for the specified URL category.
connections_denied
The number of connections denied for the specified URL category due to violation 
of an access control policy.
sensor_address
The IP address of the managed device that monitored the traffic. Format is 
ipv4_address,ipv6_address
.
sensor_id
The internal identification number of the managed device that detected the traffic. 
sensor_name
The managed device that monitored the traffic.
sensor_uuid
A unique identifier for the managed device, or 
0
 if 
sensor_name
 is 
null
.
start_time_sec
The UNIX timestamp of the start of the measurement interval. For information on 
specifying the start time, see