Key:Value object
key_value_object
A generic object allowing to define a {key:value} pair.
Attributes
| Caption | Name | Type | Description |
|---|---|---|---|
| Name | name |
String | The name of the key. |
| Raw Data | raw_data |
String | The raw event/finding data as received from the source. |
| Record ID | record_id |
String | Unique identifier for the object |
| Unmapped Data | unmapped |
Object[] | The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source. |
| Value | value |
String | The value associated to the key. |
| Values | values |
String[] | Optional, the values associated to the key. You can populate this attribute, when you have multiple values for the same key. |
Relationships
Inbound Relationships
These objects and events reference Key:Value object in their attributes:
- Windows Resource
- Account
- Web Resource
- Resource Details
- File
- Finding Information
- LDAP Person
- Compliance
- Image
- Windows Service
- Container
- Service
- Metadata
- Databucket
- Related Event/Finding
Outbound Relationships
Key:Value object references the following objects and events in its attributes:
This page describes qdm-1.4.0+ocsf-1.4.0
Updated 5 days ago