Discussions

• 1 You must be logged in to vote

  💡

  OTel LogRecord Mapping

  pagbabian-splunk started Feb 10, 2026 in Ideas

  

  

  0
• 2 You must be logged in to vote

  🙏

  Clarify usage of file.attributes

  simplepad asked Jan 14, 2026 in Q&A · Unanswered

  

  

  0
• 3 You must be logged in to vote

  🙏

  What is the difference between metadata.log_provider and metadata.product.* fields?

  simplepad asked Nov 17, 2025 in Q&A · Unanswered

  

  

  0
• 2 You must be logged in to vote

  💬

  Process arguments

  simplepad started Nov 13, 2025 in General

  

  

  0
• 1 You must be logged in to vote

  💬

  Extensions seem reserved but not publicly available

  nathan-bowman started Oct 8, 2025 in General

  

  

  2
• 2 You must be logged in to vote

  🙏

  OCSF SCAP mapping

  simplepad asked Oct 7, 2025 in Q&A · Unanswered

  

  

  0
• 3 You must be logged in to vote

  💡

  OCSF will benefit from self-certified tiers of compliance, as well as simpler onboarding for new implementations

  v1.7.0

  pagbabian-splunk started Sep 15, 2025 in Ideas

  

  

  

  

  5
• 1 You must be logged in to vote

  💬

  Look at Vulnerability Sample and Suggestions

  jasonbreimer started Jul 5, 2023 in General · Closed

  

  

  10
• 1 You must be logged in to vote

  💬

  Proposal for initial support of AI systems

  irakledibm started May 19, 2025 in General

  

  

  0
• 1 You must be logged in to vote

  🙏

  Absence of is_read Attribute in Email Object

  nkaras asked Apr 16, 2025 in Q&A · Closed · Answered

  

  

  3
• 1 You must be logged in to vote

  🙏

  Detection Finding to Incident Finding Relationship

  Haribu asked Mar 18, 2025 in Q&A · Answered

  

  

  2
• 1 You must be logged in to vote

  🙏

  Clarification on Proper Placement of Parent Process Details in Process Event (ACTOR vs PROCESS.PARENT)

  threatdecoder asked Oct 7, 2024 in Q&A · Answered

  

  

  

  

  5
• 2 You must be logged in to vote

  👻

  Proposal for an open and deterministic endpoint process UUID

  mlmitch started Oct 16, 2024 in Proposals

  

  

  

  

  10
• 2 You must be logged in to vote

  🗳️

  Adding new category to group UAS activities

  irakledibm started Oct 15, 2024 in Polls

  

  

  2
• 1 You must be logged in to vote

  💬

  Usage of the Actor object

  rstillio started Nov 1, 2023 in General

  

  

  

  

  2
• 1 You must be logged in to vote

  🙏

  Malware object not validating

  erikloman asked Jun 27, 2024 in Q&A · Closed · Answered

  

  

  

  

  4
• 1 You must be logged in to vote

  🙏

  Where to store call trace information in detection finding class

  erikloman asked Jun 27, 2024 in Q&A · Unanswered

  

  

  0
• 1 You must be logged in to vote

  🙏

  Where to store Process architecture?

  erikloman asked Jun 27, 2024 in Q&A · Unanswered

  

  

  0
• 1 You must be logged in to vote

  🙏

  Identifying the Event Source Appliance

  sunilamin asked May 24, 2024 in Q&A · Closed · Answered

  

  

  2
• 1 You must be logged in to vote

  👻

  Security Detection Language Proposal

  maintainers Issues that require attention from all maintainers framework Structures, conventions, requirements, data types, etc.

  davidmagnotti started May 2, 2024 in Proposals

  

  

  

  

  5
• 1 You must be logged in to vote

  💬

  Applying profiles to object

  wjdingman1 started Aug 22, 2023 in General

  

  

  1
• 1 You must be logged in to vote

  🙏

  Guidelines Needed: Mapping OCSF Datatypes to Different Database Systems

  DannyMor asked Mar 19, 2024 in Q&A · Unanswered

  

  

  1
• 8 You must be logged in to vote

  🙏

  Mapping multiples into OCSF attributes

  rstillio asked Feb 2, 2024 in Q&A · Unanswered

  

  

  

  

  7
• 1 You must be logged in to vote

  🙏

  Mapping Schema to Programmatic Data Models?

  thelok asked Jan 19, 2024 in Q&A · Answered

  

  

  

  

  3
• 4 You must be logged in to vote

  🗳️

  Moving 'Network File Activity' to Application - new Class Name

  mikeradka started Jan 3, 2024 in Polls · Closed

  

  

  

  

  9