Skip to main content

Dataminr

The Dataminr feed type in ArcGIS Velocity creates a built-in HTTP endpoint that can be used to receive real-time alert events from Dataminr. Dataminr provides AI-powered real-time event, threat, and risk intelligence across public data.

Learn more about the Dataminr-Esri alliance

Examples

The following are example use cases for the feed:

  • A security operations center wants to monitor real-time threat alerts across their areas of interest. They collect Dataminr alert data into Velocity to maintain real-time situational awareness about emerging events and threats.

  • An enterprise risk management team wants to track geopolitical events that may affect their supply chain. They store alert information and run analytics to identify disruptions and assess impact across their global operations.

  • A cyber threat intelligence team wants to ingest vulnerability, malware, and threat actor alerts. They use Dataminr alerts to correlate cyber threats with geographic locations and monitor threat trends over time.

Usage notes

Note the following when working with the feed:

  • The feed is a receiver type that creates an HTTP endpoint. After the feed is created, the URL in the REST Endpoint Path parameter is available on the feed details page. The HTTP endpoint URL, the User Name parameter, and the Password parameter are configured for the feed must be registered in the Dataminr system to begin receiving data.

  • Key fields are pre-configured for the feed. The alertId field is set as the Track ID and the alertTimestamp field is set as the Start Time.

  • Velocity automatically constructs point geometry from the estimatedEventLocation_lat and estimatedEventLocation_lng fields.

  • The date and time information is stored in the alertTimestamp field.

  • The feed automatically flattens JSON data received from Dataminr. Nested objects are represented as underscore-delimited field names. For example, metadata_cyber_vulnerabilities.

  • Additional fields are provided as arrays within string fields. These can be further processed in real-time analytics using the Calculate Fields or Map Fields tools.

  • The feed supports removing unwanted fields and adjusting field names. You cannot change data types or add new fields because the alert schema required by Dataminr cannot be modified.

Parameters

The following are the parameters for the feed:

Parameter Description Data type
REST Endpoint Path The system-generated endpoint over which messages are received. This parameter must be registered in the Dataminr system. It is generated and populated by Velocity only after the feed is published. String
User Name The username secures the HTTP endpoint for this feed. Register this value in the Dataminr system. String
Password The password secures the HTTP endpoint for this feed. Register this value in the Dataminr system. String

Consideration and limitation

Consider the following when using this feed:

Dataminr Customer Support uses the username, password, and HTTP endpoint URL to push data to this feed. If the username or password is unavailable, create new credentials and provide them to Dataminr Customer Support.