15.3 Customizing Data Reconciliation

To customize data reconciliation, update the tg_reconciliation_fields.json file with the desired reconciliation fields. The naming convention of the field names must be the same as what is used in the mf_shared schema in Vertica.

In the mf_shared schema, refer to the respective entity tables to get field names.

Entity

Table Name

Identity

mf-shared-entity-identity

IdentityGroup

mf-shared-entity-identitygroup

Account

mf-shared-entity-externalid

Entitlement

mf-shared-entity-entitlement

Application

mf-shared-entity-application

You can access the mf_shared schema and the tables by using the \dn and \dt commands respectively. For more information, see Vertica documentation.

  1. Log in to the Identity Intelligence server as the root user.

  2. Change to the following directory:

    For single node deployments

    cd /<install_directory>/<arcsight_nfs_volume>/eventbroker/di/data-processor/conf

    For multi-node deployments

    cd /<install_directory>/<nfs_share>/<arcsight_nfs_volume>/eventbroker/di/data-processor/conf

  3. Edit the data reconciliation fields in the tg_reconciliation_fields.json file.