Viewing Model Family and Field Mapping
You can navigate to Settings > Ontology > Ontology Status screen to see the following information:
Number of Product Types: This is the number of products that
are captured by Google Security Operations from your environment. This number is in flux
as more products are added to your environments.
Number of Events Types: This is the number of events that are
captured by Google Security Operations from your environment.
Number of Events assigned to Default Families: This is the
number of events that have been automatically assigned by Google Security Operations to
default families. At any stage, you can look in the Family Name column for
Default, click the Configure icon and assign them to a different model family.
You can select Ontology status rows using the checkboxes and export them as a zip file containing JSON file. You can also choose to import Ontology status rows. Make sure to import a zip file containing a JSON with ontology details.
To change the Model family or the field Mapping, click on the Configure icon. Refer to Event Configuration for full details.