- Print
- DarkLight
Article summary
Did you find this summary helpful?
Thank you for your feedback
Caption | Name | Requirement | Type | Description |
---|---|---|---|---|
DataBee Device ID/Start Time/End Time/Event Time | _devices | optional | json_t Array | ApplicationLifecycle.device_id: This is the id that DataBee uses to link this to a specific device. ApplicationLifecycle.start_time: The start time of a time period, or the time of the least recent event included in the aggregate event. ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. ApplicationLifecycle.time: The normalized event occurrence time. For example: 1618524549901 . |
Application Owner/Application Additional Owners/Metadata Product/Start Time/End Time/Event Time | _owners | optional | json_t Array | ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.additional_owners: Other possible owners of a product. This is added to allow an array of owners, but when there is only one owner, the owner field should be populated ApplicationLifecycle.metadata_: The metadata associated with the event or a finding.Metadata.product: The product that reported the event. ApplicationLifecycle.start_time: The start time of a time period, or the time of the least recent event included in the aggregate event. ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. ApplicationLifecycle.time: The normalized event occurrence time. For example: 1618524549901 . |
End Time | active | optional | boolean_t | ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. |
End Time | end_time | optional | timestamp_t | ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. |
Start Time/Event Time | first_seen_time | optional | timestamp_t | ApplicationLifecycle.start_time: The start time of a time period, or the time of the least recent event included in the aggregate event. ApplicationLifecycle.time: The normalized event occurrence time. For example: 1618524549901 . |
Application Vendor Name/Application Version/Application Name/Application Unique ID | id | required | integer_t | ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.vendor_name: The name of the vendor of the product. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.version: The version of the product, as defined by the event source. For example: 2013.1.3-beta .ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.name: The name of the product. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.uid: The unique identifier of the product. |
End Time/Event Time | last_seen_time | optional | timestamp_t | ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. ApplicationLifecycle.time: The normalized event occurrence time. For example: 1618524549901 . |
Application Name | name | recommended | string_t | ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.name: The name of the product. |
Record Created At | record_created_at | required | timestamp_t | CDPs generated timestamp when record was created. |
Record Updated At | record_updated_at | required | timestamp_t | CDPs generated timestamp when record was last updated. |
Metadata Product | sources | required | string_t Array | ApplicationLifecycle.metadata_: The metadata associated with the event or a finding. Metadata.product: The product that reported the event. |
Start Time | start_time | optional | timestamp_t | ApplicationLifecycle.start_time: The start time of a time period, or the time of the least recent event included in the aggregate event. |
Application Unique ID | uid | recommended | string_t | ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.uid: The unique identifier of the product. |
Application URL String | url_string | optional | string_t | ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.url_string: The URL pointing towards the product. |
Application Vendor Name | vendor_name | required | string_t | ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.vendor_name: The name of the vendor of the product. |
Application Version | version | recommended | string_t | ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.version: The version of the product, as defined by the event source. For example: 2013.1.3-beta . |
Was this article helpful?