Skip to content

Commit

Permalink
Add array of primitives that are observable to test schema
Browse files Browse the repository at this point in the history
  • Loading branch information
rmouritzen-splunk committed Mar 13, 2024
1 parent 5820455 commit 2094b48
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 1 deletion.
7 changes: 7 additions & 0 deletions test/test_ocsf_schema/dictionary.json
Original file line number Diff line number Diff line change
Expand Up @@ -87,6 +87,13 @@
"description": "An entity's thingy. (From base dictionary attribute.)",
"type": "entity_thing_t"
},
"gammas": {
"caption": "Gammas",
"description": "List of gamma values. A gamma is a gamma, which is a gamma, and so on.",
"is_array": true,
"type": "integer_t",
"observable": 10
},
"hidden_thing": {
"caption": "Hidden Thing",
"description": "A hidden thing. Another attribute for testing.",
Expand Down
5 changes: 4 additions & 1 deletion test/test_ocsf_schema/events/beta.json
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,14 @@
"description": "The Beta example event class.",
"name": "beta",
"extends": "hidden",
"uid": 2,
"uid": 3,
"profiles": [],
"attributes": {
"beta": {
"requirement": "required"
},
"gammas": {
"requirement": "optional"
}
},
"observables": {
Expand Down

0 comments on commit 2094b48

Please sign in to comment.