A source parser assigns a destination address to the principal field, causing misleading entity correlations. Which approach best fits?

Published
  1. Ingest and join appropriate entity or contextual data.
  2. Validate the parser and mapping into the Unified Data Model.
  3. Review and configure supported entity aliasing and identifier normalization.
  4. Correct and test the parser mapping against representative source events.

Comments — 0