Schema is an enumerated list of schema used for a parser. It cannot be given with a yaml schema.

This enumerated datatype is used by the input datatype, ParserTestRunInput, which is used by the testParserV2() mutation field.

Table: Schema

ParameterTypeRequiredDefaultStabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results.
Table last updated: Oct 6, 2025
ECS_EXTENDED   PreviewThe schema type is Elastic Common Schema extended.
ORIGINAL_CPS   PreviewIndicates CrowdStrike Parsing Standard is used.