dt-sec-semantic-mapping

To map vendor API data to Dynatrace security.events fields, you can use semantic dictionary mapping suggestion to align security vendor payloads with the target schema, ensuring accurate data integration and reducing manual effort.

Semantic dictionary mapping for security integrations is the process of aligning vendor security data to Dynatrace security.events fields. It involves suggesting mappings, validating them against baseline samples, and detecting discrepancies to ensure accurate data integration.

You can validate existing security mappings against live tenant data through runtime validation. This process checks your current mappings against active tenant data and the semantic dictionary to identify discrepancies and propose necessary improvements.

Yes, you can automatically detect discrepancies between the semantic dictionary and vendor data. The validation process highlights mismatches between baseline samples and vendor API outputs, allowing you to correct mappings before runtime deployment.

To align a new security vendor to the Dynatrace semantic dictionary, you need access to the semantic dictionary, mapping guidelines, and the vendor API data. This environment setup allows you to suggest, validate, and improve security.events field mappings.