Skip to content

Different schema results when using empty profiles parameter versus no parameter #174

Description

@rajkarkar-crestdata

A discrepancy is observed when querying schemas using an empty profiles parameter compared to querying without the profiles parameter in both the JSON Schema API and the OCSF UI.

Requests made without query parameters and requests made with an explicitly empty profiles parameter return different schema results.

Examples:

API Response Discrepancy

For the Network Activity class:

{
"required": [
    "activity_id",
    "category_uid",
    "class_uid",
    "cloud",
    "metadata",
    "osint",
    "severity_id",
    "time",
    "type_uid"
  ]
}
{
  required": [
    "activity_id",
    "category_uid",
    "class_uid",
    "metadata",
    "severity_id",
    "time",
    "type_uid"
  ]
}

When querying with an empty profiles parameter:

  • cloud and osint fields are not included in the root-level required fields.
  • The same fields are also absent from the properties section.

UI Discrepancy
Similar behavior is observed in the UI, where certain fields appear only when no parameters are provided in the URL.

Example — Device Inventory Info (5001) class

Image Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions