Video Screencast Help

SSIM schema's

Created: 28 Aug 2007 • Updated: 22 May 2010 | 4 comments
I was wondering if there is a more complete schema available of the SSIM databases?
Currently there is a web-based version available, but it doesn't appear to be complete.
We want to create reports based on the firewall rules (Top 10 used rules, Top 10 unused rules, etc...).
Kind regards,

Comments 4 CommentsJump to latest comment

lukaszfr's picture


If you want to see expanded database schema you may use following query:

I hope this helps.

Best Regards,

Wouter De Muynck's picture
Hello Antilles,
Thanks for the reply, we will do the test.
Kind regards,
Matt Carver's picture

It sounds like you want to create reports based on event data from the collectors, if that is the case please refer to the collector documentation. The documentation should detail how the data from a collector is populated into the event schema, and where to find specific values, like the firewall rule, in the data.

If that's not sufficient please let us know so we can adjust the documentation for the collectors.

Message Edited by Matt Carver on 08-28-200708:37 AM

AL76's picture

Hi, be aware that some of the data is stored in event archive, such as Target Resource field which you will not find it from the database.

Alan Lee

Sr Manager, Regional Product Management, APJ

Enterprise Security, Mobility & Management