Symantec 10521146 Administration Guide - Page 328

328 SQL reference Using Oracle tables Table B-1 Oracle Incident Table Field Name Type Description Notes nodeNum integer numEvts integer poolid varchar(33) poolName varchar(33) reliability severity state integer integer integer time type viewed integer varchar(129) integer Indicates the Network Security Node number where the incident originated. Indicates the number of logged events in this incident. Indicates the ID of the interface group where this event was detected. Used internally Indicates the name of the interface group where this event was detected. Indicates the reliability of the best event. Valid values are 1-10 Indicates the severity of the best event. Valid values are 1-10 Indicates the state of this incident. 1 = active (currently being monitored by the AF) 0 = closed (archived to the db) Indicates the time when incident record was last Standard UNIX time format updated. (seconds since 1970 GMT) Indicates the type of the best event. Indicates the marked status of this incident. 0 = Not yet marked by a Network Security console user. 1 = Marked by a Network Security console user, and unchanged since. 2 = Marked by a Network Security console user, but has changed since. Oracle event table The following table describes the structure of the SQL table that is used when Symantec Network Security exports event data to an Oracle database: Table B-2 Oracle Event Table Field Name Type Description Notes atkaction integer Indicates the attempted action.