I am working on creating OCSF schemas for watchdog logs and I came across some types -

|| || |User| |Access Denied| |System| |PHP| |Page Not Found| |Cron| |Security| |Form| |Update Manager|

I need to know if these are the only types? how are these types generated? I saw in my test environment there are some "content" type as well which I don't have understanding of.

Also if these are all expected to be there, how do I generate all of them specifically "security" type because that will be important to be mapped to OCSF schema.

Any help appreciated in understanding this "type" field.