Schema Extension
The OCSF Schema Extension object provides detailed information about the schema extension used to construct the event. The schema extensions are registered in the extensions.md file.
Attributes
Caption | Name | Type | Description |
---|---|---|---|
Name | name |
String |
The schema extension name. For example: dev .
|
Raw Data | raw_data |
JSON | The event data as received from the event source. |
Record ID | record_id |
String | Unique identifier for the object |
Unique ID | uid |
String |
The schema extension unique identifier. For example: 999 .
|
Unmapped Data | unmapped |
Unmapped[] | The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source. |
Version | version |
String |
The schema extension version. For example: 1.0.0-alpha.2 .
|
Relationships
Inbound Relationships
These objects and events reference Schema Extension in their attributes:
Outbound Relationships
Schema Extension references the following objects and events in its attributes:
This page describes qdm-1.3.2+ocsf-1.3.0
Updated 2 months ago