The same host appears under several identifiers, preventing useful cross-source correlation. Which approach best fits?

1. Validate the parser and mapping into the Unified Data Model.
2. Review and configure supported entity aliasing and identifier normalization.
3. Ingest and join appropriate entity or contextual data.
4. Correct and test the parser mapping against representative source events.