definition.json

{
  "attributes": {
    "datetime": {
      "description": "When the log entry was seen",
      "misp-attribute": "datetime",
      "ui-priority": 0
    },
    "message": {
      "description": "Informative message of the event",
      "misp-attribute": "text",
      "ui-priority": 0
    },
    "timestamp": {
      "description": "When the log entry was seen in microseconds since Unix epoch",
      "misp-attribute": "text",
      "ui-priority": 0
    },
    "timestamp_desc": {
      "description": "Text explaining what type of timestamp is it",
      "misp-attribute": "text",
      "ui-priority": 0
    }
  },
  "description": "A timesketch timeline object based on mandatory field in timesketch to describe a log entry.",
  "meta-category": "misc",
  "name": "timesketch-timeline",
  "requiredOneOf": [
    "message",
    "datetime"
  ],
  "uuid": "06db0221-cbc0-4ffc-ad98-7f34549310f1",
  "version": 3
}