Event Streamer (eStreamer) API

The Cisco Event Streamer (also known as eStreamer) allows you to stream Firepower System intrusion, discovery, and connection data from the Cisco Firepower Management Center or managed device (also referred to as the eStreamer server) to external client applications.

eStreamer uses a custom application layer protocol to communicate with connected client applications. As the purpose of eStreamer is simply to return data that the client requests, the majority of this guide describes the eStreamer formats for the requested data.

There are three major steps to creating and integrating an eStreamer client with a Firepower System:

1. Write a client application that exchanges messages with the Firepower Management Center or managed device using the eStreamer application protocol. The eStreamer SDK includes a reference client application.
2. Configure a Firepower Management Center or device to send the required type of events to your client application.
3. Connect your client application to the Firepower Management Center or device and begin exchanging data.

This integration guide provides the information you need to successfully create and run an eStreamer Version 5.4 client application.