An unordered collection of attributes. It defines a set of attributes available in all objects. It can be also used as a generic object to log objects that are not otherwise defined by the schema.

Attributes

CaptionNameTypeDescription
Raw Data raw_data JSON The event data as received from the event source.
Record ID record_id String Unique identifier for the object
Unmapped Data unmapped Unmapped[] The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.

Relationships

Object shown in context

Inbound Relationships

These objects and events reference Object in their attributes:

Outbound Relationships

Object references the following objects and events in its attributes:

This page describes qdm-1.3.2+ocsf-1.3.0