Skip to content

The OCSF Schema Extension object provides detailed information about the schema extension used to construct the event. The schema extensions are registered in the extensions.md file.

  • Extends: _entity

version

  • Type: string_t
  • Requirement: required

The schema extension version. For example: 1.0.0-alpha.2.

name

  • Type: string_t
  • Requirement: recommended

The schema extension name. For example: dev.

uid

  • Type: string_t
  • Requirement: recommended

The schema extension unique identifier. For example: 999.

At least one of: name, uid