PropertyValue
http://www.w3.org/1999/02/22-rdf-syntax-ns#type
http://www.w3.org/ns/prov#value
  • EDIT: There is a problem when receiving events larger than 1KB, it gets split into 1KB entries on the SIEM. Maybe the limitation of the rsyslog version on MWG 7.3.
http://www.w3.org/ns/prov#wasQuotedFrom
  • mcafee.com