Integrations / Outputs

Route evidence where it needs to go.

Outputs owns configured webhooks, SIEM, reports, Verify, and export destinations. Channels without a status source stay explicitly unavailable.

Signed SIEM Attribution

Correlated SIEM events can be pushed back as bounded enrichment records with hashes, chain pointers, attribution, confidence, and reason codes.

Splunk

Enrichment supported · HEC event

Datadog

Enrichment supported · Logs API

Microsoft Sentinel

Connector config supported · Enrichment pending

Generic webhook

Outbound supported · Customer endpoint

Configure SIEM Delivery Health

Destination	Type	Status	Last delivery	Failures	Action
No results

Open Delivery Health

API

Headless capture and output wiring paths.

GET /dashboard/delivery-health-overviewGET /webhookPOST /webhookGET /webhook/failuresPOST /webhook/retry/{delivery_id}GET /siem-connectorsPOST /siem-connectorsPOST /siem-connectors/{connector_id}/correlations/{correlation_id}/enrich