Event
Event which is generated based on continuous zone state.
In contrast to a state, an event is emitted only for changes. Thus, an event is often directly actionable.
Field | Type | Default | Unit |
---|---|---|---|
timestamp |
uint64 |
- |
- |
Unix timestamp of event |
|||
security_intrusion_started |
- |
- |
|
Security: Intrusion started |
|||
security_intrusion_ended |
- |
- |
|
Security: Intrusion ended |
|||
security_zone_intrusion_started |
- |
- |
|
Security: Zone intrusion started |
|||
security_zone_intrusion_ended |
- |
- |
|
Security: Zone intrusion ended |
Security
Container for security-related events
Intrusion Ended
An intrusion ended.
Field | Type | Default | Unit |
---|---|---|---|
started_event_id |
string |
- |
- |
ID of the IntrusionStarted event. |
|||
duration |
float |
- |
s |
Duration of the intrusion event. |
Zone Intrusion Started
An intrusion started in a security zone.
Field | Type | Default | Unit |
---|---|---|---|
zone_uuid |
string |
- |
- |
UUID of the security zone. |
|||
state |
- |
- |
|
Snapshot of the zone state. |
Zone Intrusion Ended
An intrusion of a security zone ended.
Field | Type | Default | Unit |
---|---|---|---|
zone_uuid |
string |
- |
- |
UUID of the security zone. |
|||
started_event_id |
string |
- |
- |
ID of the ZoneIntrusionStarted event. |
|||
duration |
float |
- |
s |
Duration of the intrusion event. |