Schema Extension

The OCSF Schema Extension object provides detailed information about the schema extension used to construct the event. The schema extensions are registered in the extensions.md file.

Attributes

CaptionNameTypeDescription
Name name String The schema extension name. For example: dev.
Raw Data raw_data JSON The event data as received from the event source.
Record ID record_id String Unique identifier for the object
Unique ID uid String The schema extension unique identifier. For example: 999.
Unmapped Data unmapped Unmapped[] The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.
Version version String The schema extension version. For example: 1.0.0-alpha.2.

Relationships

Schema Extension shown in context

Inbound Relationships

These objects and events reference Schema Extension in their attributes:

Outbound Relationships

Schema Extension references the following objects and events in its attributes:

This page describes qdm-1.3.2+ocsf-1.3.0