WWorkspace

Autonomy Agents Ladders Step-up Witness Shadow Evidence Cards Connect Assurance Settings

··

Loading

API keys Webhooks SIEM connectors Sinks Redaction profiles Evidence visibility Usage Billing Timezone

Settings · Signed SIEM Attribution

SIEM connectors

This admin form configures SIEM output routing. The product workflow lives under Integrations → Outputs and Delivery Health.

Integrations Outputs Delivery Health

New connector

Bounded metadata

SIEM

Display name

Credentials

Stored encrypted. Raw audit events are normalized to hashes and closed enums before correlation.

Connectors

Loading…

Loading SIEM connectors…

Enrichment dry-run

No network send

Connector

Correlation ID

Builds the exact Splunk, Datadog, or webhook enrichment request with credentials redacted and raw audit values excluded.

Enterprise connector substrate. SIEM connectors route bounded, normalized audit metadata — never raw content or model I/O.