Details
-
New Feature
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
One Eagle topology can have multiple data sources, but in practice, some policies need to join streams from multiple different topologies on the fly. For example user security logging stream and user audit logging stream are 2 different physical topologies, if we want a policy like "user tries logon xxx times and then access sensitive information", then we have develop a new topology to join the 2 data sources. That is not good. We should provide a way of easily merge the streams from the 2 existing topologies in runtime instead of in development time.