Each event is described using 16 sections. Each section defines a set of fields.
Each section is classified as primary, secondary or tertiary.
An event is considered mapped if at least one of the required fields in each primary section is provided.
Classification |
Information Availability |
Condition |
---|---|---|
Primary |
From most event sources |
Required |
Secondary |
From some event sources |
Desired |
Tertiary |
From some event sources |
Optional |
Copyright © 2013 CA.
All rights reserved.
|
|