gchq / event-logging-schema

Event Logging is an XML Schema for describing the auditable events generated by computer systems, hardware devices and access control systems
Apache License 2.0
25 stars 6 forks source link

Need to record event source unique identified #56

Closed burnalting closed 3 years ago

burnalting commented 5 years ago

In many cases, an event source maintains a unique identifier (to the source capability). It is requested that we create an element to hold this source identifier.

It is suggest we use Event/EventSource/SourceEventId and this should be of type xs:string.

It is also suggested that users make use of an interim element Event/EventSource/Data[@Name='EventSourceId']/@Value and any future schema uplift (from one schema version to the next) translations apply this transform.

at055612 commented 5 years ago

Covered by #58

at055612 commented 3 years ago

Covered by EventSource/EventId available in v5.0