1. A method for correlating information, comprising: receiving an event notification, the event notification comprising event information and a natural key; mapping the natural key to a normalized key; selecting, by a processor, a first hint for the normalized key, the first hint indicating which of a plurality of surrogate keys associated with the normalized key will be used in a record corresponding to the event information; determining whether to use the first hint; when the first hint is to be used, mapping the normalized key and first hint to identify a second surrogate key in the plurality of surrogate keys; and when the first hint is not to be used, selecting a second hint for the normalized key, the second hint being associated with a first surrogate key in the plurality of surrogate keys.