Lightlines
By elastic

research-integration

elastic505 installs

Research briefs for building Elastic integrations.

What it does

Produces a sourced research brief that prepares a vendor's data sources, schemas, and configuration requirements for an Elastic integration build.

When to use it

Invoke manually to investigate a vendor, product, or feature before building an Elastic integration.

How to use it

Give it a vendor, product, or feature to investigate; it writes a structured research brief and supporting files under research_results/<product_slug>/.

What you provide

  • a vendor, product, or feature

Uses

Good to know

  • starts helper agents, number unstated

Latest review

What you need · 3

Requires loading its ECS mapping guidance for the research analysis, while excluding implementation details.

Requires its data-stream classification reference to classify proposed streams as events or entities, but explicitly excludes the rest of the skill.


Access · 6

This skill

vendor documentation

Read

Reads vendor documentation

IBM QRadar

Read

Checks IBM QRadar integrations