Schema Extension

extension

The OCSF Schema Extension object provides detailed information about the schema extension used to construct the event. The schema extensions are registered in the extensions.md file.

Attributes

Caption	Name	Type	Description
Name	`name`	String	The schema extension name. For example: `dev`.
Raw Data	`raw_data`	JSON	Group:`context` The event data as received from the event source.
Record ID	`record_id`	String	Group:`primary` Unique identifier for the object
Unique ID	`uid`	String	The schema extension unique identifier. For example: `999`.
Unmapped	`unmapped`	Unmapped[]	Data from the source that was not mapped into the schema.
Version	`version`	String	The schema extension version. For example: `1.0.0-alpha.2`.

Relationships

Inbound Relationships

These objects and events reference Schema Extension in their attributes:

Metadata

Outbound Relationships

Schema Extension references the following objects and events in its attributes:

Unmapped

This page describes ocsf-1.4.0

Updated 10 days ago