Reportersteps¶
This type represents a step in the REPORTERCHAIN that captures information about any notable REPORTER (in addition to the OBSERVER) that modified or relayed the CADF Event Record and any details regarding any modification it performed on the CADF Event Record it is contained within.
The Reporterstep data type should capture information about the resources that have had a role in modifying, or relaying the CADF Event Record during its lifecycle after having been created by the OBSERVER.
Property | Type | Required | Description |
---|---|---|---|
role | xs:string | Yes | The role the REPORTER performed on the CADF Event Record (e.g., an “observer”, “modifier” or “relay” role) |
reporter | cadf:Resource | Dependent | This property defines the resource that acted as a REPORTER on a CADF Event Record. Required if not reporterId |
reporterId | cadf:Identifier | Dependent | This property identifies a resource that acted as a REPORTER on a CADF Event Record by reference. Required if not reporter |
reporterTime | cadf:Timestamp | No | The time a REPORTER adds its Reporterstep entry into the REPORTERCHAIN |
attachments | cadf:Attachment[] | No | An optional array of additional data containing information about the reporter or any action it performed |
Serialisation¶
{
"typeURI": "http://schemas.dmtf.org/cloud/audit/1.0/event",
...,
"reporterchain": [
{
"role": "modifier",
"reporterTime": "2012-03-22T13:00:00-04:00",
"reporter": {
"id": "myscheme://mydomain/resource/monitor/id/0002"
}
},
...
]
}