Research briefs for building Elastic integrations.
Produces a sourced research brief that prepares a vendor's data sources, schemas, and configuration requirements for an Elastic integration build.
When to use it
Invoke manually to investigate a vendor, product, or feature before building an Elastic integration.
Give it a vendor, product, or feature to investigate; it writes a structured research brief and supporting files under research_results/<product_slug>/.
What you provide
Requires loading its ECS mapping guidance for the research analysis, while excluding implementation details.
Requires its data-stream classification reference to classify proposed streams as events or entities, but explicitly excludes the rest of the skill.
This skill
vendor documentation
Reads vendor documentation
IBM QRadar
Checks IBM QRadar integrations