Class: Ticket

The Ticket object represents ticket in the customer's IT Service Management

(ITSM) systems like ServiceNow, Jira, etc.

 classDiagram
    class Ticket
    click Ticket href "../Ticket/"
      Object <|-- Ticket
        click Object href "../Object/"

      Ticket : src_url

      Ticket : status

      Ticket : status_details

      Ticket : status_id





        Ticket --> "0..1" TicketStatusIdEnum : status_id
        click TicketStatusIdEnum href "../TicketStatusIdEnum/"



      Ticket : title

      Ticket : type

      Ticket : type_id





        Ticket --> "0..1" TicketTypeIdEnum : type_id
        click TicketTypeIdEnum href "../TicketTypeIdEnum/"



      Ticket : uid

Inheritance

OcsfObject
- Object
  - Ticket

Slots

Name	Cardinality and Range	Description	Inheritance
src_url	0..1 recommended UrlT	The url of a ticket in the ticket system	direct
status	0..1 String	The status of the ticket normalized to the caption of the	direct
status_details	* String	A list of contextual descriptions of the `status, status_id` value...	direct
status_id	0..1 TicketStatusIdEnum	The normalized identifier for the ticket status	direct
title	0..1 String	The title of the ticket	direct
type	0..1 String	The linked ticket type determines whether the ticket is internal or in an	direct
type_id	0..1 TicketTypeIdEnum	The normalized identifier for the ticket type	direct
uid	0..1 recommended String	Unique identifier of the ticket	direct

Usages

used by	used in	type	used
IncidentProfile	ticket	range	Ticket
IncidentProfile	tickets	range	Ticket
ApplicationSecurityPostureFinding	ticket	range	Ticket
ApplicationSecurityPostureFinding	tickets	range	Ticket
ComplianceFinding	ticket	range	Ticket
ComplianceFinding	tickets	range	Ticket
DataSecurityFinding	ticket	range	Ticket
DataSecurityFinding	tickets	range	Ticket
DetectionFinding	ticket	range	Ticket
DetectionFinding	tickets	range	Ticket
Finding	ticket	range	Ticket
Finding	tickets	range	Ticket
IamAnalysisFinding	ticket	range	Ticket
IamAnalysisFinding	tickets	range	Ticket
IncidentFinding	ticket	range	Ticket
IncidentFinding	tickets	range	Ticket
VulnerabilityFinding	ticket	range	Ticket
VulnerabilityFinding	tickets	range	Ticket

Rules

Rule Applied	Preconditions	Postconditions	Elseconditions
any_of		`[{'slot_conditions': {'src_url': {'required': True}}}, {'slot_conditions': {'uid': {'required': True}}}]`

In Subsets

objects_subset

Aliases

Ticket

Identifier and Mapping Information

Annotations

property	value
ocsf_constraints	{"at_least_one": ["src_url", "uid"]}

Schema Source

from schema: https://w3id.org/lmodel/ocsf

Mappings

Mapping Type	Mapped Value
self	ocsf:Ticket
native	ocsf:Ticket

LinkML Source

Direct

name: Ticket
annotations:
  ocsf_constraints:
    tag: ocsf_constraints
    value: '{"at_least_one": ["src_url", "uid"]}'
description: 'The Ticket object represents ticket in the customer''s IT Service Management

  (ITSM) systems like ServiceNow, Jira, etc.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Ticket
is_a: Object
slots:
- src_url
- status
- status_details
- status_id
- title
- type
- type_id
- uid
slot_usage:
  src_url:
    name: src_url
    description: The url of a ticket in the ticket system.
    recommended: true
  status:
    name: status
    description: 'The status of the ticket normalized to the caption of the

      <code>status_id</code> value. In the case of <code>99</code>, this value should

      as defined by the source.'
  status_details:
    name: status_details
    description: A list of contextual descriptions of the <code>status, status_id</code>
      values.
  status_id:
    name: status_id
    description: The normalized identifier for the ticket status.
    range: TicketStatusIdEnum
  title:
    name: title
    description: The title of the ticket.
  type:
    name: type
    description: 'The linked ticket type determines whether the ticket is internal
      or in an

      external ticketing system.'
  type_id:
    name: type_id
    description: The normalized identifier for the ticket type.
    range: TicketTypeIdEnum
  uid:
    name: uid
    description: Unique identifier of the ticket.
    recommended: true
rules:
- postconditions:
    any_of:
    - slot_conditions:
        src_url:
          name: src_url
          required: true
    - slot_conditions:
        uid:
          name: uid
          required: true
  description: 'OCSF at_least_one: at least one of [''src_url'', ''uid''] must be
    set.'

Induced

name: Ticket
annotations:
  ocsf_constraints:
    tag: ocsf_constraints
    value: '{"at_least_one": ["src_url", "uid"]}'
description: 'The Ticket object represents ticket in the customer''s IT Service Management

  (ITSM) systems like ServiceNow, Jira, etc.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Ticket
is_a: Object
slot_usage:
  src_url:
    name: src_url
    description: The url of a ticket in the ticket system.
    recommended: true
  status:
    name: status
    description: 'The status of the ticket normalized to the caption of the

      <code>status_id</code> value. In the case of <code>99</code>, this value should

      as defined by the source.'
  status_details:
    name: status_details
    description: A list of contextual descriptions of the <code>status, status_id</code>
      values.
  status_id:
    name: status_id
    description: The normalized identifier for the ticket status.
    range: TicketStatusIdEnum
  title:
    name: title
    description: The title of the ticket.
  type:
    name: type
    description: 'The linked ticket type determines whether the ticket is internal
      or in an

      external ticketing system.'
  type_id:
    name: type_id
    description: The normalized identifier for the ticket type.
    range: TicketTypeIdEnum
  uid:
    name: uid
    description: Unique identifier of the ticket.
    recommended: true
attributes:
  src_url:
    name: src_url
    description: The url of a ticket in the ticket system.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Source URL
    rank: 1000
    alias: src_url
    owner: Ticket
    domain_of:
    - Osint
    - Package
    - Ticket
    - Advisory
    - Cvss
    - Cwe
    - D3fTactic
    - D3fTechnique
    - DataClassification
    - Enrichment
    - FindingObject
    - FindingInfo
    - KbArticle
    - Mitigation
    - SubTechnique
    - Tactic
    - Technique
    - IncidentProfile
    - IncidentFinding
    range: UrlT
    recommended: true
  status:
    name: status
    description: 'The status of the ticket normalized to the caption of the

      <code>status_id</code> value. In the case of <code>99</code>, this value should

      as defined by the source.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Status
    rank: 1000
    alias: status
    owner: Ticket
    domain_of:
    - RelatedEvent
    - Ticket
    - Whois
    - AdditionalRestriction
    - Check
    - Compliance
    - DataClassification
    - HttpResponse
    - BaseEvent
    - Finding
    - IncidentFinding
    - DroneFlightsActivity
    range: string
  status_details:
    name: status_details
    description: A list of contextual descriptions of the <code>status, status_id</code>
      values.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Status Details
    rank: 1000
    alias: status_details
    owner: Ticket
    domain_of:
    - Ticket
    - Compliance
    - DataClassification
    range: string
    multivalued: true
  status_id:
    name: status_id
    annotations:
      sibling:
        tag: sibling
        value: status
    description: The normalized identifier for the ticket status.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Status ID
    rank: 1000
    alias: status_id
    owner: Ticket
    domain_of:
    - Ticket
    - AdditionalRestriction
    - Check
    - Compliance
    - DataClassification
    - BaseEvent
    - Finding
    - IncidentFinding
    - RemediationActivity
    - DroneFlightsActivity
    range: TicketStatusIdEnum
  title:
    name: title
    description: The title of the ticket.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Title
    rank: 1000
    alias: title
    owner: Ticket
    domain_of:
    - RelatedEvent
    - Ticket
    - Vulnerability
    - Advisory
    - Cve
    - FindingObject
    - FindingInfo
    - KbArticle
    range: string
  type:
    name: type
    description: 'The linked ticket type determines whether the ticket is internal
      or in an

      external ticketing system.'
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Type
    rank: 1000
    alias: type
    owner: Ticket
    domain_of:
    - AnalysisTarget
    - Observable
    - Os
    - Osint
    - Package
    - PrivilegeInfo
    - ProgrammaticCredential
    - RelatedEvent
    - San
    - Sbom
    - Script
    - SoftwareComponent
    - StartupItem
    - ThreatActor
    - Ticket
    - Timespan
    - TlsExtension
    - Token
    - Dns
    - Resource
    - Account
    - Agent
    - Analytic
    - ApplicationObject
    - AuthenticationToken
    - ClassifierDetails
    - Cve
    - Database
    - Databucket
    - DiscoveryDetails
    - DnsAnswer
    - DomainContact
    - EncryptionDetails
    - Endpoint
    - Enrichment
    - File
    - Graph
    - Group
    - Ja4Fingerprint
    - Kernel
    - ManagedEntity
    - Metadata
    - Module
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - PeripheralDevice
    - Policy
    - Rule
    - Scan
    - Trait
    - UnmannedAerialSystem
    - UnmannedSystemOperatingArea
    - User
    - WebResource
    - Device
    - DatastoreActivity
    - FtpActivity
    - RegValue
    - WinResource
    range: string
  type_id:
    name: type_id
    annotations:
      sibling:
        tag: sibling
        value: type
    description: The normalized identifier for the ticket type.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Type ID
    rank: 1000
    alias: type_id
    owner: Ticket
    domain_of:
    - Observable
    - Os
    - Osint
    - Package
    - PrivilegeInfo
    - Sbom
    - Script
    - SoftwareComponent
    - StartupItem
    - ThreatActor
    - Ticket
    - Timespan
    - TlsExtension
    - Token
    - Account
    - Agent
    - Analytic
    - AuthenticationToken
    - Database
    - Databucket
    - DomainContact
    - Endpoint
    - File
    - Ja4Fingerprint
    - Kernel
    - ManagedEntity
    - NetworkEndpoint
    - NetworkInterface
    - PeripheralDevice
    - Scan
    - UnmannedAerialSystem
    - UnmannedSystemOperatingArea
    - User
    - Device
    - DatastoreActivity
    - RegValue
    - WinResource
    range: TicketTypeIdEnum
  uid:
    name: uid
    description: Unique identifier of the ticket.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Unique ID
    rank: 1000
    alias: uid
    owner: Ticket
    domain_of:
    - Osint
    - Package
    - ProgrammaticCredential
    - RelatedEvent
    - Request
    - Sbom
    - Scim
    - Script
    - Session
    - Span
    - Sso
    - Ticket
    - Token
    - Trace
    - Entity
    - Resource
    - Account
    - Advisory
    - Agent
    - AiModel
    - Aircraft
    - Analytic
    - ApplicationObject
    - Assessment
    - Certificate
    - Check
    - ClassifierDetails
    - Container
    - Cve
    - Cwe
    - D3fTactic
    - D3fTechnique
    - DataClassification
    - Database
    - Databucket
    - DomainContact
    - Edge
    - Email
    - Endpoint
    - Evidences
    - Extension
    - Feature
    - File
    - FindingObject
    - FindingInfo
    - Graph
    - Group
    - HttpRequest
    - Idp
    - Image
    - KbArticle
    - LoadBalancer
    - Logger
    - Malware
    - ManagedEntity
    - MessageContext
    - Metadata
    - Mitigation
    - NetworkConnectionInfo
    - NetworkEndpoint
    - NetworkInterface
    - Node
    - Organization
    - PeripheralDevice
    - Policy
    - ProcessEntity
    - Product
    - QueryInfo
    - Reporter
    - Rule
    - Scan
    - Service
    - SubTechnique
    - Table
    - Tactic
    - Technique
    - Trait
    - TransformationInfo
    - UnmannedAerialSystem
    - User
    - WebResource
    - Device
    - WinResource
    range: string
    recommended: true
rules:
- postconditions:
    any_of:
    - slot_conditions:
        src_url:
          name: src_url
          required: true
    - slot_conditions:
        uid:
          name: uid
          required: true
  description: 'OCSF at_least_one: at least one of [''src_url'', ''uid''] must be
    set.'