Related Events
LAST UPDATED: SEPTEMBER 25, 2025
PREREQUISITES
Knowledge of field mapping.
Knowledge of artifact instantiation.
-20250919-220908.png?inst-v=42f6df80-df0f-4ec4-af2e-6f907a55cc8f)
Navigate to the Investigation Dashboard > Artifacts > All Artifacts panel.
-20250919-234837.png?inst-v=42f6df80-df0f-4ec4-af2e-6f907a55cc8f)
Select the site that matches the one configured when generating the EFM API key.
Click on an artifact record, then navigate to the Related Events tab.
Click on an event record, identifiable by its unique ID number.
-20250919-220955.png?inst-v=42f6df80-df0f-4ec4-af2e-6f907a55cc8f)
The Total Event Count column attribute in the Investigation Dashboard > Artifacts > All Artifacts table indicates the number of related events linked to each artifact record. The following sections introduce required matching factors for grouping related events and non-impacting factors.
Required Matching Factors
Value of the payload target key
(artifact name)
REMINDER
Artifacts instantiate only when all instantiation criteria are met.
Non-Impacting Factors
Integration
Event source
Name of the payload target key
Position of the matching target field in the JSON payload
Position of the EFM record in the mapping table
Artifact role
Relationship configuration