Cisco IDS: SQL queries request

[duchesne_ced]

Hi,

You can export the event database to a text file that can imported in a SQL database.

I'm newbie in SQL and don't have much time: Does anobody has already wrote some basic sql queries and agree to share it with me ?

thanks

[r-simpson]

You should have access to some basic queries already:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids5/csidscog/dmp.htm#19229

[pbobby]

Unfortunately if you're new to CSIDS and have only used CSPM, you wont have ever seen the available SQL queries that were part of the Directory implementation.

Not sure if you'll be able to download old upgrades, and extract the queries from that. If a Cisco rep can give permission, I'd be happy to send you the queries from that older implementation to you.