Cisco Cisco Firepower Management Center 2000 开发者指南
3-25
FireSIGHT System Host Input API Guide
Chapter 3 Using the Host Input Import Tool
Example Host Input Import File
•
•
•
Example: Setting the Source ID and Product Map
The example script starts with calls to set the name of the source application and the product map to be
used in the import:
used in the import:
# Set the current SOURCE_ID and Product Map to "Asset Management App"
#
SetSource, Asset Management App
SetMap, Asset Management App
This source ID value is used to provide an application name for the system to use in host input events
resulting from this import. If you viewed a host input event or a host profile for a host modified using
this import, the Source Type value would be
resulting from this import. If you viewed a host input event or a host profile for a host modified using
this import, the Source Type value would be
Application: Asset Management App
.
Note that the product map called “Asset Management App” referenced by the SetMap command was
created using the Defense Center web interface:
created using the Defense Center web interface:
Because the third-party product map is the Asset Management App map set, the system maps any
third-party operating or server names used in the commands contained in the import file to Cisco
definitions using product maps or fix maps defined in that map set, as illustrated in
third-party operating or server names used in the commands contained in the import file to Cisco
definitions using product maps or fix maps defined in that map set, as illustrated in
.