Cisco Cisco Firepower Management Center 2000 Guia Do Programador

Página de 180
 
5-17
FireSIGHT System Database Access Guide
 
Chapter 5      Schema: Statistics Tracking Tables
  url_reputation_stats_current_timeframe
url_reputation_stats_current_timeframe
The 
url_reputation_stats_current_
timeframe
 tables contain statistics on the bandwidth usage and 
connections associated with requests to URLs with specified reputations. Query results can also be 
constrained on the managed device that monitored the traffic.
For an understanding of the 
current_day
current_month
, and 
current_year
 statistics tables, see 
.
For more information on the 
url_reputation_stats_current_
timeframe
 tables, see the following 
sections:
  •
  •
  •
url_reputation_stats_current_timeframe Fields
The following table describes the fields you can access in the 
url_category_stats_current_
timeframe
 
tables.
Table 5-14
url_reputation_stats_current_timeframe Fields 
Field
Description
bytes_in
The bytes of inbound traffic during the specified interval.
bytes_out
The bytes of outbound traffic during the specified interval.
connections_allowed
The number of connections allowed.
connections_denied
The number of connections denied due to violation of an access control policy.
reputation
The risk associated with the requested URL. One of the following:
  •
High risk
  •
Suspicious site
  •
Benign site with security risks
  •
Benign site
  •
Well known
  •
Risk unknown
sensor_address
The IP address of the managed device that monitored the traffic. Format is 
ipv4_address,ipv6_address
.
sensor_id
Internal identification number of the managed device that monitored the traffic.
sensor_name
The name of the managed device that monitored the traffic.
sensor_uuid
A unique identifier for the managed device, or 
0
 if 
sensor_name
 is 
null
.
start_time_sec
The UNIX timestamp of the start of the measurement interval. For information on 
specifying the start time, see 
.