Enum: SeverityIdEnum
The normalized identifier of the event/finding severity.
severity is a measurement the effort and expense required to manage and resolve
an event or incident. Smaller numerical values represent lower impact events,
and larger numerical values represent higher impact events.
URI: ocsf:SeverityIdEnum
Permissible Values
| Value | Meaning | Description |
|---|---|---|
| UNKNOWN | None | The event/finding severity is unknown |
| INFORMATIONAL | None | Informational message |
| LOW | None | The user decides if action is needed |
| MEDIUM | None | Action is required but the situation is not serious at this time |
| HIGH | None | Action is required immediately |
| CRITICAL | None | Action is required immediately and the scope is broad |
| FATAL | None | An error occurred but it is too late to take remedial action |
| OTHER | None | The event/finding severity is not mapped |
Slots
| Name | Description |
|---|---|
| severity_id | The normalized identifier of the event/finding severity |
Identifier and Mapping Information
Schema Source
- from schema: https://w3id.org/lmodel/ocsf
LinkML Source
name: SeverityIdEnum
description: '<p>The normalized identifier of the event/finding severity.</p>The normalized
severity is a measurement the effort and expense required to manage and resolve
an event or incident. Smaller numerical values represent lower impact events,
and larger numerical values represent higher impact events.'
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
UNKNOWN:
text: UNKNOWN
description: The event/finding severity is unknown.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '0'
caption:
tag: caption
value: Unknown
INFORMATIONAL:
text: INFORMATIONAL
description: Informational message. No action required.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '1'
caption:
tag: caption
value: Informational
LOW:
text: LOW
description: The user decides if action is needed.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '2'
caption:
tag: caption
value: Low
MEDIUM:
text: MEDIUM
description: Action is required but the situation is not serious at this time.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '3'
caption:
tag: caption
value: Medium
HIGH:
text: HIGH
description: Action is required immediately.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '4'
caption:
tag: caption
value: High
CRITICAL:
text: CRITICAL
description: Action is required immediately and the scope is broad.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '5'
caption:
tag: caption
value: Critical
FATAL:
text: FATAL
description: An error occurred but it is too late to take remedial action.
annotations:
ocsf_uid:
tag: ocsf_uid
value: '6'
caption:
tag: caption
value: Fatal
OTHER:
text: OTHER
description: 'The event/finding severity is not mapped. See the <code>severity</code>
attribute, which contains a data source specific value.'
annotations:
ocsf_uid:
tag: ocsf_uid
value: '99'
caption:
tag: caption
value: Other