Schema Extension
extension
The OCSF Schema Extension object provides detailed information about the schema extension used to construct the event. The schema extensions are registered in the extensions.md file.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Name | name | String | The schema extension name. For example: dev. |
| Raw Data | raw_data | JSON | Group:contextThe event data as received from the event source. |
| Record ID | record_id | String | Group:primaryUnique identifier for the object |
| Unique ID | uid | String | The schema extension unique identifier. For example: 999. |
| Unmapped | unmapped | Unmapped[] | Data from the source that was not mapped into the schema. |
| Version | version | String | The schema extension version. For example: 1.0.0-alpha.2. |
Relationships
Inbound Relationships
These objects and events reference Schema Extension in their attributes:
Outbound Relationships
Schema Extension references the following objects and events in its attributes:
This page describes qdm-1.5.1+ocsf-1.6.0