Class: Baseline
Describes the baseline or expected behavior of a system, service, or component
based on historical observations and measurements. It establishes reference
points for comparison to detect anomalies, trends, and deviations from typical
patterns.
URI: ocsf:Baseline
classDiagram
class Baseline
click Baseline href "../Baseline/"
Object <|-- Baseline
click Object href "../Object/"
Baseline : observation_parameter
Baseline : observation_type
Baseline : observations
Baseline --> "1..*" Observation : observations
click Observation href "../Observation/"
Baseline : observed_pattern
Inheritance
- OcsfObject
- Object
- Baseline
- Object
Slots
| Name | Cardinality and Range | Description | Inheritance |
|---|---|---|---|
| observation_parameter | 1 String |
The specific parameter or property being monitored | direct |
| observation_type | 0..1 recommended String |
The type of analysis being performed to establish baseline behavior | direct |
| observations | 1..* Observation |
Collection of actual measured values, data points and observations recorded f... | direct |
| observed_pattern | 0..1 recommended String |
The specific pattern identified within the observation type | direct |
Usages
| used by | used in | type | used |
|---|---|---|---|
| AnomalyAnalysis | baselines | range | Baseline |
In Subsets
Aliases
- Baseline
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/ocsf
Mappings
| Mapping Type | Mapped Value |
|---|---|
| self | ocsf:Baseline |
| native | ocsf:Baseline |
LinkML Source
Direct
name: Baseline
description: 'Describes the baseline or expected behavior of a system, service, or
component
based on historical observations and measurements. It establishes reference
points for comparison to detect anomalies, trends, and deviations from typical
patterns.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Baseline
is_a: Object
slots:
- observation_parameter
- observation_type
- observations
- observed_pattern
slot_usage:
observation_parameter:
name: observation_parameter
description: 'The specific parameter or property being monitored. Examples include:
CPU usage
percentage, API response time in milliseconds, HTTP error rate, memory
utilization, network latency, transaction volume, etc.'
required: true
observation_type:
name: observation_type
description: 'The type of analysis being performed to establish baseline behavior.
Common
types include: Frequency Analysis, Time Pattern Analysis, Volume Analysis,
Sequence Analysis, Distribution Analysis, etc.'
recommended: true
observations:
name: observations
description: 'Collection of actual measured values, data points and observations
recorded for
this baseline.'
required: true
observed_pattern:
name: observed_pattern
description: 'The specific pattern identified within the observation type. For
Frequency
Analysis, this could be ''FREQUENT'', ''INFREQUENT'', ''RARE'', or ''UNSEEN''.
For Time
Pattern Analysis, this could be ''BUSINESS_HOURS'', ''OFF_HOURS'', or
''UNUSUAL_TIME''. For Volume Analysis, this could be ''NORMAL_VOLUME'',
''HIGH_VOLUME'', or ''SURGE''. The pattern values are specific to each observation
type and indicate the baseline behavior.'
recommended: true
Induced
name: Baseline
description: 'Describes the baseline or expected behavior of a system, service, or
component
based on historical observations and measurements. It establishes reference
points for comparison to detect anomalies, trends, and deviations from typical
patterns.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Baseline
is_a: Object
slot_usage:
observation_parameter:
name: observation_parameter
description: 'The specific parameter or property being monitored. Examples include:
CPU usage
percentage, API response time in milliseconds, HTTP error rate, memory
utilization, network latency, transaction volume, etc.'
required: true
observation_type:
name: observation_type
description: 'The type of analysis being performed to establish baseline behavior.
Common
types include: Frequency Analysis, Time Pattern Analysis, Volume Analysis,
Sequence Analysis, Distribution Analysis, etc.'
recommended: true
observations:
name: observations
description: 'Collection of actual measured values, data points and observations
recorded for
this baseline.'
required: true
observed_pattern:
name: observed_pattern
description: 'The specific pattern identified within the observation type. For
Frequency
Analysis, this could be ''FREQUENT'', ''INFREQUENT'', ''RARE'', or ''UNSEEN''.
For Time
Pattern Analysis, this could be ''BUSINESS_HOURS'', ''OFF_HOURS'', or
''UNUSUAL_TIME''. For Volume Analysis, this could be ''NORMAL_VOLUME'',
''HIGH_VOLUME'', or ''SURGE''. The pattern values are specific to each observation
type and indicate the baseline behavior.'
recommended: true
attributes:
observation_parameter:
name: observation_parameter
description: 'The specific parameter or property being monitored. Examples include:
CPU usage
percentage, API response time in milliseconds, HTTP error rate, memory
utilization, network latency, transaction volume, etc.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Observation Parameter
rank: 1000
alias: observation_parameter
owner: Baseline
domain_of:
- Anomaly
- Baseline
range: string
required: true
observation_type:
name: observation_type
description: 'The type of analysis being performed to establish baseline behavior.
Common
types include: Frequency Analysis, Time Pattern Analysis, Volume Analysis,
Sequence Analysis, Distribution Analysis, etc.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Observation Type
rank: 1000
alias: observation_type
owner: Baseline
domain_of:
- Anomaly
- Baseline
range: string
recommended: true
observations:
name: observations
description: 'Collection of actual measured values, data points and observations
recorded for
this baseline.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Observations
rank: 1000
alias: observations
owner: Baseline
domain_of:
- Anomaly
- Baseline
range: Observation
required: true
multivalued: true
observed_pattern:
name: observed_pattern
description: 'The specific pattern identified within the observation type. For
Frequency
Analysis, this could be ''FREQUENT'', ''INFREQUENT'', ''RARE'', or ''UNSEEN''.
For Time
Pattern Analysis, this could be ''BUSINESS_HOURS'', ''OFF_HOURS'', or
''UNUSUAL_TIME''. For Volume Analysis, this could be ''NORMAL_VOLUME'',
''HIGH_VOLUME'', or ''SURGE''. The pattern values are specific to each observation
type and indicate the baseline behavior.'
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Observed Pattern
rank: 1000
alias: observed_pattern
owner: Baseline
domain_of:
- Anomaly
- Baseline
range: string
recommended: true