Application Owners

End Time

end_time

optional

timestamp_t

ApplicationLifecycle.app: The application that was affected by the lifecycle event.  This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. ApplicationLifecycle.app: The application that was affected by the lifecycle event.  This also applies to self-updating application systems. Product.additional_owners: Other possible owners of a product. This is added to allow an array of owners, but when there is only one owner, the owner field should be populated. ApplicationLifecycle.metadata_: The metadata associated with the event or a finding. Metadata.product: The product that reported the event. ApplicationLifecycle.start_time: The start time of a time period, or the time of the least recent event included in the aggregate event. ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. ApplicationLifecycle.time: The normalized event occurrence time. For example: 1618524549901.

First Seen Time

first_seen_time

optional

timestamp_t

ApplicationLifecycle.app: The application that was affected by the lifecycle event.  This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. ApplicationLifecycle.app: The application that was affected by the lifecycle event.  This also applies to self-updating application systems. Product.additional_owners: Other possible owners of a product. This is added to allow an array of owners, but when there is only one owner, the owner field should be populated. ApplicationLifecycle.metadata_: The metadata associated with the event or a finding. Metadata.product: The product that reported the event. ApplicationLifecycle.start_time: The start time of a time period, or the time of the least recent event included in the aggregate event. ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. ApplicationLifecycle.time: The normalized event occurrence time. For example: 1618524549901.

ID

id

required

integer_t

ApplicationLifecycle.app: The application that was affected by the lifecycle event.  This also applies to self-updating application systems. Product.vendor_name: The name of the vendor of the product. ApplicationLifecycle.app: The application that was affected by the lifecycle event.  This also applies to self-updating application systems. Product.version: The version of the product, as defined by the event source. For example: 2013.1.3-beta. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.name: The name of the product. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.uid: The unique identifier of the product. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.additional_owners: Other possible owners of a product. This is added to allow an array of owners, but when there is only one owner, the owner field should be populated. ApplicationLifecycle.metadata_: The metadata associated with the event or a finding. Metadata.product: The product that reported the event. ApplicationLifecycle.start_time: The start time of a time period, or the time of the least recent event included in the aggregate event. ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. ApplicationLifecycle.time: The normalized event occurrence time. For example: 1618524549901.

Owner Label

key

required

string_t

CDPs generated type of owner information derived from User, e.g., BU_OWNER_ID.

Last Seen Time

last_seen_time

optional

timestamp_t

ApplicationLifecycle.app: The application that was affected by the lifecycle event.  This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. ApplicationLifecycle.app: The application that was affected by the lifecycle event.  This also applies to self-updating application systems. Product.additional_owners: Other possible owners of a product. This is added to allow an array of owners, but when there is only one owner, the owner field should be populated. ApplicationLifecycle.metadata_: The metadata associated with the event or a finding. Metadata.product: The product that reported the event. ApplicationLifecycle.start_time: The start time of a time period, or the time of the least recent event included in the aggregate event. ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. ApplicationLifecycle.time: The normalized event occurrence time. For example: 1618524549901.

Record Created At

record_created_at

required

timestamp_t

CDPs generated timestamp when record was created.

Record Updated At

record_updated_at

required

timestamp_t

CDPs generated timestamp when record was last updated.

Application ID

software_application_id

required

integer_t

ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.vendor_name: The name of the vendor of the product. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.version: The version of the product, as defined by the event source. For example: 2013.1.3-beta. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.name: The name of the product. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.uid: The unique identifier of the product.

Data Source

source

optional

string_t

ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.additional_owners: Other possible owners of a product. This is added to allow an array of owners, but when there is only one owner, the owner field should be populated. ApplicationLifecycle.metadata_: The metadata associated with the event or a finding. Metadata.product: The product that reported the event. ApplicationLifecycle.start_time: The start time of a time period, or the time of the least recent event included in the aggregate event. ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. ApplicationLifecycle.time: The normalized event occurrence time. For example: 1618524549901.

Start Time

start_time

optional

timestamp_t

ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. ApplicationLifecycle.app: The application that was affected by the lifecycle event.  This also applies to self-updating application systems. Product.additional_owners: Other possible owners of a product. This is added to allow an array of owners, but when there is only one owner, the owner field should be populated. ApplicationLifecycle.metadata_: The metadata associated with the event or a finding. Metadata.product: The product that reported the event. ApplicationLifecycle.start_time: The start time of a time period, or the time of the least recent event included in the aggregate event. ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. ApplicationLifecycle.time: The normalized event occurrence time. For example: 1618524549901.

Owner User ID

value

required

integer_t

ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.owner: The owner of the product. Typically this is the user responsible for the application internal to the organization. ApplicationLifecycle.app: The application that was affected by the lifecycle event. This also applies to self-updating application systems. Product.additional_owners: Other possible owners of a product. This is added to allow an array of owners, but when there is only one owner, the owner field should be populated. ApplicationLifecycle.metadata_: The metadata associated with the event or a finding. Metadata.product: The product that reported the event. ApplicationLifecycle.start_time: The start time of a time period, or the time of the least recent event included in the aggregate event. ApplicationLifecycle.end_time: The end time of a time period, or the time of the most recent event included in the aggregate event. ApplicationLifecycle.time: The normalized event occurrence time. For example: 1618524549901.