Baseline

baseline

Describes the baseline or expected behavior of a system, service, or component based on historical observations and measurements. It establishes reference points for comparison to detect anomalies, trends, and deviations from typical patterns.

Attributes

CaptionNameTypeDescription
Observation Parameterobservation_parameterString

The specific parameter or property being monitored. Examples include: CPU usage percentage, API response time in milliseconds, HTTP error rate, memory utilization, network latency, transaction volume, etc.

Observation Typeobservation_typeString

The type of analysis being performed to establish baseline behavior. Common types include: Frequency Analysis, Time Pattern Analysis, Volume Analysis, Sequence Analysis, Distribution Analysis, etc.

ObservationsobservationsObservation[]

Collection of actual measured values, data points and observations recorded for this baseline.

Observed Patternobserved_patternString

The specific pattern identified within the observation type. For Frequency Analysis, this could be 'FREQUENT', 'INFREQUENT', 'RARE', or 'UNSEEN'. For Time Pattern Analysis, this could be 'BUSINESS_HOURS', 'OFF_HOURS', or 'UNUSUAL_TIME'. For Volume Analysis, this could be 'NORMAL_VOLUME', 'HIGH_VOLUME', or 'SURGE'. The pattern values are specific to each observation type and indicate the baseline behavior.

Raw Dataraw_dataJSON

Group:context
The event data as received from the event source.

Record IDrecord_idString

Group:primary
Unique identifier for the object

UnmappedunmappedUnmapped[]

Data from the source that was not mapped into the schema.

Relationships

Baseline shown in context

Inbound Relationships

These objects and events reference Baseline in their attributes:

Outbound Relationships

Baseline references the following objects and events in its attributes:

This page describes qdm-1.5.1+ocsf-1.6.0