I have a question about the Entity Graph, and specifically whether I can customise it and use it for non-default purposes? Here is a simple use case I’d like to know if it’s possible and if so how I can go about it.
We log information about customer activity. Customers have an ID, but they also have multiple accounts, each with their own Account ID. Some events have only customer ID, or only account ID, while other events will record both CID and AID.
I would like to create a mapping in the Graph that is updated automatically when Chronicle sees a log with both IDs, such that when a log with only one of the IDs is seen, it can be enriched with the missing data. So if the log only has CID, then it is enriched with all known AIDs from the Graph, and when it has just an AID, it is enriched with the parent CID from the Graph.
Is this possible?
LinkedIn
Twitter
