Skip to content

Slot: log_source_name

The log source provider or service name (e.g., 'sysmon', 'auditd', 'unified_logs', 'windows_security'). Together with log_source_channel, uniquely identifies a specific log collection configuration.

URI: attack:log_source_name Alias: log_source_name

Applicable Classes

Name Description Modifies Slot
LogSourceReference A reference linking an analytic to a specific data component and log source p... yes
LogSource A platform-specific log collection configuration embedded within a data compo... yes

Properties

Type and Range

Property Value
Range String
Domain Of LogSource, LogSourceReference

Cardinality and Requirements

Property Value
Required Yes

In Subsets

Identifier and Mapping Information

Schema Source

  • from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type Mapped Value
self attack:log_source_name
native attack:log_source_name

LinkML Source

name: log_source_name
description: The log source provider or service name (e.g., 'sysmon', 'auditd', 'unified_logs',
  'windows_security'). Together with log_source_channel, uniquely identifies a specific
  log collection configuration.
in_subset:
- attack_aux
from_schema: https://w3id.org/lmodel/attack
rank: 1000
alias: log_source_name
domain_of:
- LogSource
- LogSourceReference
range: string
required: true