https://community.cisco.com/t5/endpoint-security/cisco-firepower-estreamer-event-types/m-p/4158631#M5694 <P>Event details for&nbsp;FMC 6.1.0</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ioc.png" style="width: 999px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/84812i7BC3F789CE1640F3/image-size/large?v=v2&amp;px=999" role="button" title="ioc.png" alt="ioc.png" /></span></P> Tue, 29 Sep 2020 10:57:04 GMT Kalana Kaushanga 2020-09-29T10:57:04Z https://community.cisco.com/t5/endpoint-security/cisco-firepower-estreamer-event-types/m-p/4149255#M5656 <P>Hi Community,</P><P>&nbsp;</P><P>I have&nbsp;<SPAN>Cisco_Firepower_Estreamer and forwarded all the logs in to my SIEM (QRadar). from there I have identified below event type. Can someone please help me on clear these events activities.</SPAN></P><P>&nbsp;</P><P><SPAN>Event type -&nbsp;&nbsp;IOC_STATE_RECORD (what this means)</SPAN></P><P><SPAN>iocState.value= (have different values) like 51, 52, 16, 2. What this means ? any reference link to get idea&nbsp;</SPAN></P><P><SPAN>recordType=IOC_STATE_RECORD&nbsp;</SPAN></P><P><SPAN>eventType=HOST_IOC_SET_TYPE for all events this event type is same.</SPAN></P><P><SPAN>detectionEngineRef= 1,0,4,etc. what this meant any reference link to get idea on this.</SPAN></P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Thu, 10 Sep 2020 16:19:33 GMT https://community.cisco.com/t5/endpoint-security/cisco-firepower-estreamer-event-types/m-p/4149255#M5656 Kalana Kaushanga 2020-09-10T16:19:33Z https://community.cisco.com/t5/endpoint-security/cisco-firepower-estreamer-event-types/m-p/4158631#M5694 <P>Event details for&nbsp;FMC 6.1.0</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ioc.png" style="width: 999px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/84812i7BC3F789CE1640F3/image-size/large?v=v2&amp;px=999" role="button" title="ioc.png" alt="ioc.png" /></span></P> Tue, 29 Sep 2020 10:57:04 GMT https://community.cisco.com/t5/endpoint-security/cisco-firepower-estreamer-event-types/m-p/4158631#M5694 Kalana Kaushanga 2020-09-29T10:57:04Z https://community.cisco.com/t5/endpoint-security/cisco-firepower-estreamer-event-types/m-p/4436811#M6236 <P>Can you provide us with official documentation for this issue?</P> Wed, 21 Jul 2021 16:57:04 GMT https://community.cisco.com/t5/endpoint-security/cisco-firepower-estreamer-event-types/m-p/4436811#M6236 MSS_PROOF 2021-07-21T16:57:04Z