https://unifiedcyberontology.org/ontology/uco/observable#EventFacet
Instances of observable:EventFacet can have the following properties:
PROPERTY |
PROPERTY TYPE |
DESCRIPTION |
MIN COUNT |
MAX COUNT |
VALUE CONSTRAINTS |
LOCAL TYPE |
GLOBAL RANGE |
---|---|---|---|---|---|---|---|
observable:EventFacet | |||||||
observable:application | owl:ObjectProperty |
The application associated with this object.
|
1 | 1 |
|
observable:ObservableObject
|
observable:ObservableObject
|
observable:computerName | owl:DatatypeProperty |
A name of the computer on which the log entry was created.
|
0 | 1 |
|
xsd:string
|
xsd:string
|
observable:cyberAction | owl:ObjectProperty |
The action taken in response to the event.
|
0 | 1 |
|
observable:ObservableAction
|
observable:ObservableAction
|
observable:eventID | owl:DatatypeProperty |
The identifier of the event.
|
0 | 1 |
|
xsd:string
|
xsd:string
|
observable:eventText | owl:DatatypeProperty |
The textual representation of the event.
|
0 | 1 |
|
xsd:string
|
xsd:string
|
observable:eventType | owl:DatatypeProperty |
The type of the event, for example 'information', 'warning' or 'error'.
|
0 | 1 |
|
xsd:string
|
xsd:string
|
observable:observableCreatedTime | owl:DatatypeProperty |
The date and time at which the observable object being characterized was created. This time pertains to an intrinsic characteristic of the observable object, and would be consistent across independent characterizations or observations of the observable object.
|
0 | 1 |
|
xsd:dateTime
|
xsd:dateTime
|
@prefix core: <https://unifiedcyberontology.org/ontology/uco/core#> .
@prefix observable: <https://unifiedcyberontology.org/ontology/uco/observable#> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
observable:EventFacet a owl:Class,
sh:NodeShape ;
rdfs:label "EventFacet"@en ;
rdfs:comment "An event facet is a grouping of characteristics unique to something that happens in a digital context (e.g., operating system events)."@en ;
rdfs:subClassOf core:Facet ;
sh:property [ sh:class observable:ObservableAction ;
sh:maxCount 1 ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path observable:cyberAction ],
[ sh:class observable:ObservableObject ;
sh:maxCount 1 ;
sh:minCount 1 ;
sh:nodeKind sh:BlankNodeOrIRI ;
sh:path observable:application ],
[ sh:datatype xsd:dateTime ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:observableCreatedTime ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:computerName ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:eventID ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:eventText ],
[ sh:datatype xsd:string ;
sh:maxCount 1 ;
sh:nodeKind sh:Literal ;
sh:path observable:eventType ] ;
sh:targetClass observable:EventFacet .