Symantec 10521146 Administration Guide - Page 335

SQL reference 335 Using MySQL tables Table B-4 Field Name clusterID contextBuffer contextDesc crtTime custID dips dst_etheraddr dvName endTime eventCode eventNum flowcookie fmly guiTxt MySQL Event Table Type Description Notes integer text text integer varchar(41) varchar(195) varchar(33) varchar(41) integer varchar(65) integer text varchar(33) varchar(65) Indicates the user-defined Network Security cluster ID where the incident originated. Indicates additional information sent by the sensor. Not every event will have context information. Example: For HTTP events, this may be a URL. For FTP events, this may be a username. Indicates the description of the data in contextBuffer. Base-64 encoded. Indicates the time when this event was realized in Standard UNIX time the analysis framework. format (seconds since 1970 GMT) Indicates the Customer ID that this event is associated with. Indicates a list of destination IPs for this event. Indicates the destination ethernet address. Indicates the name of the network device where the event was detected. Indicates the end time for this event, according to Standard UNIX time the sensor. format. Indicates the Symantec standard code representing the event. Indicates the event number for this incident. The first event in an incident will have an eventNum of 1. The eventNum will be incremented by 1 for each subsequent event. Indicates the flowcookie. Indicates the event family. For class=sniffer events, this is integrity or availability. For class=generic events, this is fnotice or notice Deprecated.