Cisco Cisco Firepower Management Center 2000 Guia Do Programador

If you define a custom operating system for a host, the FireSIGHT System web interface indicates the 
source for the change in the Source Type field of the event view or the basic host information of the host 
profile.

 for an example of this function used 

in a script.

Use this syntax:

SetOS($source_type_id, $source_id, $addr_string, $attrib_list, $os)

The 

$os

 variable is an OS definition hash that supports several keys. If you call the 

SetCurrent3rdPartyMap

 function before calling the 

SetOS

 function, note the third-party product name 

details and Cisco product definition when creating the third-party mapping. See 

 for more information.

$source_type_id

Indicates the type of the host 
input source. 

Yes

“Application”

 or 

“Scanner”

Note you should set the 

$source_type_id

 

variable to contain the appropriate value 
before invoking the 

SetOS

 function, and 

then reference 

$source_type_id

 in your 

function call. For more information, see 

$source_id

Indicates the source ID for the 
source adding the host input. 

Yes

Note you should set the 

$source_id

 

variable to contain the source ID before 
invoking the 

SetOS

 function, and then 

reference 

$source_id

 in your function 

call. For more information, see 

$addr_string

Indicates the string containing 
the IP address or addresses for 
the affected hosts.

Yes (unless attribute 
lists are provided)

A comma-separated list of IP addresses, 
CIDR blocks, and ranges of IP addresses, 
enclosed in double quotes.

$attrib_list

Indicates the host attribute or 
attributes specifying the hosts 
affected by the host input.

Yes (unless IP 
addresses are 
provided)

A list of attribute value hash pairs of the 
format:

{attribute => “Department”,

value => “Development”},

Note that 

$attrib_list

 must be an array 

or reference an array.

$os

Contains a hash with keys 
describing the details of an 
operating system definition.

If you set a current 
third-party map 
before calling 

SetOS

, 

only the rendering 
keys are required.

The 

$os

 variable is an OS definition hash 

that supports several keys. For more 
information, see