Missing customer_uid attribute

[rroupski]

The customer_uid attribute is missing from the base event. We need it to handle multi-tenant systems such as Splunk on cloud that handles events from multiple customers.

[pagbabian-splunk]

I believe customer_uid was a metadata attribute rather than a base event attribute.

[floydtree]

Agreed, it's a better suited field for metadata. We had discussed it here as well.

Alternative is to create implementation specific profiles and add such fields to these profiles. Selecting a profile would overlay such fields for every class.

[paveljos]

There is potential for plurality and hierarchy which is not well represented by a single field.