SecurityAlertEvent

  • alert
    Type: object
    required
    • description
      Type: string
      required
    • severity
      Type: string enum
      required
      values
      • low
      • medium
      • high
      • critical
    • type
      Type: string enum
      required
      values
      • suspicious_login_pattern
      • brute_force
      • data_breach
      • malware_detected
  • eventId
    Type: string Format: uuid
    required
  • eventType
    enum
    const:  
    security.alert
    required
    values
    • security.alert
  • timestamp
    Type: string Format: date-time
    required

    the date-time notation as defined by RFC 3339, section 5.6, for example, 2017-07-21T17:32:28Z

  • actions
    Type: array string[]
  • activity
    Type: object
    • attempts
      Type: integer

      Integer numbers.

    • ipAddresses
      Type: array string[] Format: ipv4
    • timeWindow
      Type: string Format: duration
  • metadata
    Type: object · EventMetadata
    • correlationId
      Type: string

      Correlation ID for tracing related events

    • requestId
      Type: string

      ID of the request that triggered the event

    • severity
      Type: string enum

      Event severity level

      values
      • info
      • warning
      • error
      • critical
    • source
      Type: string

      Source system that generated the event

    • userId
      Type: integer Format: int64

      ID of the user who triggered the event (if applicable)