List OCSF event classes
ocsf_get_classesRetrieve OCSF event classes and descriptions for a specific schema version to identify suitable mappings for cybersecurity log data.
Instructions
Get all OCSF event classes and their descriptions for a specific schema version.
Use this tool to:
Browse available OCSF event classes before creating a mapping
Identify which class best matches your log data
Understand the purpose and scope of each event class
Once you identify a candidate class, use ocsf_get_class to see its
complete schema with all fields and attributes.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| version | Yes | OCSF schema version (e.g., '1.6.0') |