Get OCSF event class
ocsf_get_classRetrieve the complete OCSF event class definition with all fields, types, and constraints. Use it to understand required vs optional fields and validate source data mapping.
Instructions
Get the complete definition of a specific OCSF event class including all fields and metadata.
Use this tool to:
Understand the full schema of an OCSF event class before mapping
See required vs optional fields
Discover nested object structures and their field definitions
Validate that your source data can map to the class
This returns the complete class definition including all attributes, types, and constraints needed to create accurate OCSF mappings.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | OCSF class name (e.g., 'security_finding') | |
| version | Yes | OCSF schema version (e.g., '1.6.0') |