Resource Attributes

The processed Resources are composed of several attributes, each of which is a data field with its own characteristics. The data fields common to all resources are described below.

Each attribute has both a Label that you see in the ArcSight Console and a unique Script Alias you use to refer to the attribute in filters, rules, or Velocity templates. The Data Type lets you know how to handle the attribute. (See also Resources for information on locked and unlocked resources, and Common Resource Attribute Fields for information on viewing and/or editing these fields in resource editors.)

Resource Attributes

Group

Label

Script Alias

Data Type

Description

Resource Type

Name

name

String

Top-level categorization of the resource as shown on the Navigator panel, for example, Active Channel, Asset, Rule, and so on.

Common

Resource ID

 

 

Read-only field that shows the system resource ID.

 

External ID

externalId

String

An identification string suitable for, and which can be referenced by external systems. Common applications of External IDs include appropriate naming for Case and Asset resources that are tracked in common with defect reporting or vulnerability-management systems. Your administrator can advise you on the correct values for this field, if applicable. For Vulnerability resources, this field will be filled in with an ID of the format <standards body>|<id>, such as CVE | CVE-1999-200.

 

Alias

alias

String

An identification string suitable for referencing resources. A given alias will appear in place of the resource's name everywhere it may be seen. Your administrator can advise you on the correct values for this field, if applicable.

 

Description

description

String

An editable text description of the resource or other related information. This text appears as a tooltip to any user who has ArcSight Console access to the resource.

 

Version ID

   

A string showing a globally unique version ID for the resource.

 

Deprecated

   

Indicates whether a resource is current or obsolete. If this field is blank, the resource is current. If this field is check marked, the resource is "deprecated" or obsolete. Click the box to toggle the checkmark on or off.

Assign

Owner

owner

String

One or more users who are interested in this resource.

 

Notification
Groups

notificationGroups

String

The ArcSight user groups selected from the Users resource tree who should be notified about this resource.

Parent Group

groupNameLink

 

Resource Group

Each resource group containing this resource. A resource exists in more than one group when you choose Link instead of Copy or Move.

Creation Information

Created By

userName

User

The identity of the user who created this resource.

 

Creation Time

creationTime

DateTime

The time that the resource was created.

 

Time Since Creation

timeSinceCreation

String

The elapsed time, in days, hours, minutes, and seconds since this resource was created.

Last Update Information

Last Updated By

lastUpdatedBy

User

The identity of the user who last updated this resource.

 

Last Update Time

lastUpdateTime

DateTime

The time that the resource was last updated.

 

Time Since Last Update

timeSinceLastUpdate

String

The elapsed time, in days, hours, minutes, and seconds since this resource was last updated.