Skip to content

Enum: IncidentFindingActivityIdEnum

The normalized identifier of the Incident activity.

URI: ocsf:IncidentFindingActivityIdEnum

Permissible Values

Value Meaning Description
CREATE None Reports the creation of an Incident
UPDATE None Reports updates to an Incident
CLOSE None Reports closure of an Incident
UNKNOWN None The event activity is unknown
OTHER None The event activity is not mapped

Slots

Name Description
activity_id The normalized identifier of the Incident activity

Identifier and Mapping Information

Schema Source

LinkML Source

name: IncidentFindingActivityIdEnum
description: The normalized identifier of the Incident activity.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  CREATE:
    text: CREATE
    description: Reports the creation of an Incident.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Create
  UPDATE:
    text: UPDATE
    description: Reports updates to an Incident.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Update
  CLOSE:
    text: CLOSE
    description: Reports closure of an Incident .
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Close
  UNKNOWN:
    text: UNKNOWN
    description: The event activity is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  OTHER:
    text: OTHER
    description: 'The event activity is not mapped. See the <code>activity_name</code>
      attribute,

      which contains a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other