Class ObservabilityPipelineOcsfMapperProcessor

The ocsf_mapper processor transforms logs into the OCSF schema using a predefined mapping configuration.

Hierarchy

  • ObservabilityPipelineOcsfMapperProcessor

Constructors

constructor

Properties

additionalProperties? id include inputs mappings type

Constructors

constructor

Properties

Optional additionalProperties

additionalProperties?: {
    [key: string]: any;
}

A container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.

Type declaration

  • [key: string]: any

id

id: string

The unique identifier for this component. Used to reference this component in other parts of the pipeline.

include

include: string

A Datadog search query used to determine which logs this processor targets.

inputs

inputs: string[]

A list of component IDs whose output is used as the input for this processor.

mappings

mappings: ObservabilityPipelineOcsfMapperProcessorMapping[]

A list of mapping rules to convert events to the OCSF format.

type

type: ObservabilityPipelineOcsfMapperProcessorType

The processor type. The value should always be ocsf_mapper.

Settings

Member Visibility

Theme

Generated using TypeDoc