PROCESSING AND STORING EVENT DATA IN A KNOWLEDGE GRAPH FORMAT FOR ANOMALY DETECTION

A technique for anomaly detection is disclosed. Event data is converted into a normalized common information model. The resulting data may be stored in an event data store database. Additionally, the resulting data may be stored in a knowledge graph representation in a knowledge graph database. The knowledge graph database efficiently stores event data to generate histograms on demand for common anomaly queries.