Skip to content

Enum: SeverityIdEnum

The normalized identifier of the event/finding severity.

The normalized

severity is a measurement the effort and expense required to manage and resolve

an event or incident. Smaller numerical values represent lower impact events,

and larger numerical values represent higher impact events.

URI: ocsf:SeverityIdEnum

Permissible Values

Value Meaning Description
UNKNOWN None The event/finding severity is unknown
INFORMATIONAL None Informational message
LOW None The user decides if action is needed
MEDIUM None Action is required but the situation is not serious at this time
HIGH None Action is required immediately
CRITICAL None Action is required immediately and the scope is broad
FATAL None An error occurred but it is too late to take remedial action
OTHER None The event/finding severity is not mapped

Slots

Name Description
severity_id

The normalized identifier of the event/finding severity

Identifier and Mapping Information

Schema Source

LinkML Source

name: SeverityIdEnum
description: '<p>The normalized identifier of the event/finding severity.</p>The normalized

  severity is a measurement the effort and expense required to manage and resolve

  an event or incident. Smaller numerical values represent lower impact events,

  and larger numerical values represent higher impact events.'
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: The event/finding severity is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  INFORMATIONAL:
    text: INFORMATIONAL
    description: Informational message. No action required.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Informational
  LOW:
    text: LOW
    description: The user decides if action is needed.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Low
  MEDIUM:
    text: MEDIUM
    description: Action is required but the situation is not serious at this time.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Medium
  HIGH:
    text: HIGH
    description: Action is required immediately.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: High
  CRITICAL:
    text: CRITICAL
    description: Action is required immediately and the scope is broad.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: Critical
  FATAL:
    text: FATAL
    description: An error occurred but it is too late to take remedial action.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: Fatal
  OTHER:
    text: OTHER
    description: 'The event/finding severity is not mapped. See the <code>severity</code>

      attribute, which contains a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other