Feature Description
Add NGSIEM management/provisioning read tools: list data connections, parsers, and lookup files, and report provisioning status. Today search_ngsiem executes pre-written CQL only; there is no management surface.
Use Case
As an administrator managing an NGSIEM tenant, I want to enumerate data connections, parsers, and lookup files and check provisioning status through falcon-mcp, so I can inspect the ingest/parse configuration alongside search.
Related Module/Area
NGSIEM module
Proposed Solution
Add read tools for data connections, parsers, lookup files, and provisioning status following the existing module pattern.
Feature Description
Add NGSIEM management/provisioning read tools: list data connections, parsers, and lookup files, and report provisioning status. Today
search_ngsiemexecutes pre-written CQL only; there is no management surface.Use Case
As an administrator managing an NGSIEM tenant, I want to enumerate data connections, parsers, and lookup files and check provisioning status through falcon-mcp, so I can inspect the ingest/parse configuration alongside search.
Related Module/Area
NGSIEM module
Proposed Solution
Add read tools for data connections, parsers, lookup files, and provisioning status following the existing module pattern.