Cisco Cisco Firepower Management Center 2000 开发者指南

下载
页码 102
 
3-6
FireSIGHT System Host Input API Guide
 
Chapter 3      Using the Host Input Import Tool 
  Host Input Import Syntax
Note that some fields are required only in that you must supply that information to make sure that the 
host input succeeds and adds meaningful data to the network map. For example, you can add a fix to the 
system without providing a fix identification number or fix name that matches an existing Cisco fix 
definition and without mapping the third-party fix to a Cisco fix. However, even if that fix addresses 
vulnerabilities on the host where you added it, those vulnerabilities cannot be marked invalid if the 
system cannot map the fix to the vulnerabilities using an Cisco fix definition.
In general, supply as much information as possible for any data you import to ensure that the data can 
be used for data correlation. 
Host Input Import Syntax
After you set the source ID and product map for your import file, as described in 
, you can add lines to your import file to import the specific data you want to add to your 
network map using various host input functions. Each import function call must end in a hard return and 
imports one set of import data. For an example of a complete import file, see 
.
For more information on specific commands you can use, see the following sections:
  •
  •
  •
  •
  •
  •
  •
  •
Host Functions
You can use the host input API to add and remove hosts in the network map and to set operating system 
definitions for hosts. 
For more information on host functions, see the following sections:
  •
  •
  •
  •
AddHost
You can use the 
AddHost
 function to add a host to the network map. You can add an IP host (a host with 
an IP address and optionally a MAC address) or a MAC-only host (a host with only a MAC address). 
Because hosts created using the API are not tracked by the system, these hosts are not subject to the 
normal host timeout.