The Entity Data Model component in Identity Intelligence generates and stores entity change events as follows:
When there are changes to entity data, such as addition, deletion, modification, or change in relationships in the data source, the Entity Data Model component generates entity change events in common event format (CEF) to track any type of changes to entity data.
The Entity Data Mode component sends these events to the SmartConnector for Syslog NG Daemon.
SmartConnector sends the events to the th-cef Kafka topic in Transformation Hub.
Transformation Hub stores events in database.