larssand
e35445da4f
add value-shape field classification and auto-apply
...
Field roles are now inferred from observed values instead of names,
with src/dst disambiguation, value-pattern detector hints, an Ollama
advisor scoped to ambiguous fields only, confidence-gated auto-apply
with manual-field protection, and drift flagging for review
2026-09-07 21:58:25 +02:00
larssand
009c54b206
fix relation -
2026-07-02 16:16:30 +02:00
larssand
7d0e66c239
add relationship fields
2026-07-02 15:07:15 +02:00
larssand
7c0b482a22
improve find fileds for default profiles
2026-07-02 09:51:25 +02:00
larssand
baa3bb95e8
add find deluta fields in diffrent streams add in profile
2026-06-30 21:27:01 +02:00
larssand
5a9588fe31
Fixed the bad classification issue.
2026-06-30 16:49:11 +02:00
larssand
78f11af302
Added the Profile Discovery report.
2026-06-30 16:15:54 +02:00
larssand
4a441bf443
MCP sample fetch now asks for common Winlogbeat/ECS fields before
2026-06-30 15:10:47 +02:00
larssand
d7b8c494e9
Added the optional Ollama profile advisor
2026-06-30 09:09:04 +02:00
larssand
f2385a00a9
Profile recommendations
2026-06-30 08:55:15 +02:00
larssand
d99fe24b84
Looks at observed logs per stream.
...
Finds common denominators:
2026-06-29 21:38:11 +02:00
