event-logging-schema
event-logging-schema copied to clipboard
gchq
Event Logging is an XML Schema for describing the auditable events generated by computer systems, hardware devices and access control systems
Equivalent to the SQL `IN` clause and to support `in dictionary` in stroom.
In a number of scenarios, a file may have mutliple hashes, perhaps both cryptograpgic and fuzzy (similarity). As a result, the Hash element of BaseFileComplexType should be unbounded to support...
Location.Floor is currently of type Integer. We have a site with a floor named "Ground". Please change Floor type to string.
Would save a bit of rework
Currently we have the following which limits the permission types granted to an enumerated list. We need to be able to support other types. ```xml A permission rule associated with...
Not all emails have a parseable Date timestamp, but it is the timestamp recorded of the email. We should have a Date String element within the EmailComplextType to represent accurately...
The current `UpdateComplexType` supports the recording of the before and after states of an audited entity. Systems may not always have access to both states. E.g. if they are adding...
Enumeration `PermissionAttributeSimpleType` may be `Author`, `Owner`, `Read`, `Write`, `Execute`. Please add values `Create`, `Update`. `Delete`, `Use`
Consider adding unbounded `Data` elements to primary ComplexTypes. For example add to `EventTimeComplexType`, `SystemComplexType`, `DoorType`, `NetworkEventActionComplexType`
Even when an operation does not fit nicely into the schema it can still be logged, as an ``. Such operations may fail, but there is not currently an ``...