Long String

long_string

This object is a used to capture strings which may be truncated by a security product due to their length.

Attributes

Caption	Name	Type	Description
Is Truncated	`is_truncated`	Boolean	Indicates that value has been truncated. May be omitted if truncation has not occurred.
Raw Data	`raw_data`	JSON	Group:`context` The event data as received from the event source.
Record ID	`record_id`	String	Group:`primary` Unique identifier for the object
Unmapped	`unmapped`	Unmapped[]	Data from the source that was not mapped into the schema.
Untruncated Size	`untruncated_size`	Integer	The size in bytes of the string represented by value before truncation. Should be omitted if truncation has not occurred.
Value	`value`	String	The string value, truncated if is_truncated is true.

These objects and events reference Long String in their attributes:

Long String references the following objects and events in its attributes:

This page describes qdm-1.5.1+ocsf-1.6.0