The Dataminr feed type in ArcGIS Velocity creates a built-in HTTP endpoint that can be used to receive real-time alert events from Dataminr. Dataminr provides artificial intelligence (AI)-powered real-time event, threat, and risk intelligence across public data.
Learn more about the Dataminr-Esri alliance
Examples
The following are example use cases for the feed:
- A security operations center wants to monitor real-time threat alerts across their areas of interest. They collect Dataminr alert data into Velocity to maintain real-time situational awareness about emerging events and threats.
- An enterprise risk management team wants to track geopolitical events that may affect their supply chain. They store alert information and run analytics to identify disruptions and assess impact across their global operations.
- A cyber threat intelligence team wants to ingest vulnerability, malware, and threat actor alerts. They use Dataminr alerts to correlate cyber threats with geographic locations and monitor threat trends over time.
Usage notes
Note the following when working with the feed:
- The feed is a receiver type that creates an HTTP endpoint. After the feed is created, the HTTP endpoint URL is available on the feed's details page. Provide the HTTP endpoint URL, username, and password set during feed configuration to Dataminr to begin receiving data in the feed.
- Key fields are preconfigured for the feed. The alertId field is set as the Track ID and the alertTimestamp field is set as the Start Time.
- Velocity automatically constructs point geometry from the estimatedEventLocation_lat and estimatedEventLocation_lng fields.
- The date and time information is stored in the alertTimestamp field.
- The feed automatically flattens JSON data received from Dataminr. Nested objects are represented as underscore-delimited field names, for example, metadata_cyber_vulnerabilities.
- Additional fields are provided as arrays within string fields. These can be further processed in real-time analytics using the Calculate Fields and Map Fields tools.
- The feed supports removing unwanted fields and adjusting field names. You cannot change data types or add new fields because the alert schema required by Dataminr cannot be modified.
Parameters
The following are the parameters for the feed:
| Parameter | Description | Data type |
|---|---|---|
| User Name | The username secures the HTTP endpoint for this feed. Register this value in the Dataminr system. | String |
| Password | The password secures the HTTP endpoint for this feed. Register this value in the Dataminr system. | String |
| Additional logging (optional) | Specify whether you want to log raw HTTP requests and responses issued by Velocity to Dataminr. Note:Only turn on the Enable Request Logging option for troubleshooting and turn it off when troubleshooting is complete. After turning on the option, start the feed; the debug-level logs are available on the feed logs page. Contact Esri Technical Support for help with troubleshooting if necessary. | Boolean |
| Parameters | Description | Data type |
|---|---|---|
| User Name | ||
Consideration and limitation
Dataminr Customer Support uses the username, password, and HTTP endpoint URL to push data to this feed. If the username or password is unavailable, create new credentials and provide them to Dataminr Customer Support.