Reportersteps

This type represents a step in the REPORTERCHAIN that captures information about any notable REPORTER (in addition to the OBSERVER) that modified or relayed the CADF Event Record and any details regarding any modification it performed on the CADF Event Record it is contained within.

The Reporterstep data type should capture information about the resources that have had a role in modifying, or relaying the CADF Event Record during its lifecycle after having been created by the OBSERVER.

Property

Type

Required

Description

role

xs:string

Yes

The role the REPORTER performed on the CADF Event Record (e.g., an “observer”, “modifier” or “relay” role)

reporter

cadf:Resource

Dependent

This property defines the resource that acted as a REPORTER on a CADF Event Record. Required if not reporterId

reporterId

cadf:Identifier

Dependent

This property identifies a resource that acted as a REPORTER on a CADF Event Record by reference. Required if not reporter

reporterTime

cadf:Timestamp

No

The time a REPORTER adds its Reporterstep entry into the REPORTERCHAIN

attachments

cadf:Attachment[]

No

An optional array of additional data containing information about the reporter or any action it performed

Serialisation

{
    "typeURI": "http://schemas.dmtf.org/cloud/audit/1.0/event",
    ...,
    "reporterchain": [
        {
            "role": "modifier",
            "reporterTime": "2012-03-22T13:00:00-04:00",
            "reporter": {
                "id": "myscheme://mydomain/resource/monitor/id/0002"
            }
        },
        ...
    ]
}