Руководство Разработчика для Cisco Cisco Firepower Management Center 4000
6-62
FireSIGHT System Database Access Guide
Chapter 6 Schema: Discovery Event and Network Map Tables
user_ipaddr_history
user_ipaddr_history Joins
The following table describes the joins you can perform on the
user_ipaddr_history
table.
user_ipaddr_history Sample Query
The following query returns all user activity records for the selected IP address after the specified start
timestamp.
timestamp.
SELECT ipaddr, start_time_sec, end_time_sec, user_name, user_rna_service,
user_last_seen_sec, user_last_updated_sec
FROM user_ipaddr_history
WHERE HEX(ipaddr) = "00000000000000000000FFFF0A0A0A04" AND start_time_sec >=
UNIX_TIMESTAMP("2011-10-01 00:00:00");
Table 6-58
user_ipaddr_history Joins
You can join this table on...
And...
ipaddr
user_id