Causing investigations to merge

Analysis flows are responsible for informing the IBM® Counter Fraud Management system whether an investigation that might be raised as part of this analysis can be merged with an existing investigation that currently exists in an editable state.

About this task

The caseSearchFlag parameter indicates whether the Counter Fraud system attempts to find an investigation with which to merge any new investigations. When this parameter is set to search, the merge is attempted. If this property is not set by the analysis flow before the Counter Fraud Analysis Director begins processing the assessment actions, no merge is attempted.

The analysis flow must also tell the system about the conditions for completing the merge. The analysis flow must set the systemKey property value. The recommended value uses the following format:

AnalysisFlowName.focalObjectRef_objectType:objectID{.object type:object id
    {, object_type:object_id
    {{, …}}}

The minimum string that is used to merge investigations would be from the same analysis flow and for the same focal object. For example, the minimal systemKey value might be exampleFlow.party:123 or exampleFlow.account:456.

A more complex systemKey value might also be exampleFlow.party:123.event:456, or exampleFlow.party:123.account:345. Since the systemKey property is set by the analysis, it is consistent for each investigation that the analysis flow generates. This consistent value instructs the Counter Fraud system to merge investigations based on these matching strings. This string is not meant to be recursive, meaning that a single object type instance, such as a single party or single account, occurs in the string. The goal is a proper match, not a string version of the related objects list.

Notes:
  • The analysis flow developer is responsible for setting the systemKey value based on the analysis criteria that is used to determine potential fraud in this specific analysis. It is recommended that you use the flow name and focal object as the minimum key.
  • A user with appropriate access rights to create new investigations can set this value in the Key field in the Create Investigation or Create Investigation dialog box.
  • The caseSearchFlag parameter must be set to search for the case to be updated with the merged information.