## Connection

API Base URL Internal API Key (memory only)
Error:

### Health

Field | Value
--- | ---

### Auto Sync

Field | Value
--- | ---

### Systems Monitor

Minutes Limit Auto refresh
Interval (seconds)

### Run Sim Logs

Script
Target (multi-select)
Scenario Count Delay (s) Forever

Logs | Action
--- | ---

#### Run Output

Tail lines Auto refresh logs
Interval (seconds)

#### Wazuh Live Correlation

auto refresh every 5s
Records
Latest 100 (no filter)
Show query used

##### Latest Event Logs

Time | rule.id | rule.description | full_log
--- | --- | --- | ---

No events found for selected run yet.

### Incident Pipeline KPIs

KPI | Value
--- | ---

### Database Tables

schema | table | row_count | estimated_rows | size_pretty | size_bytes
--- | --- | --- | --- | --- | ---

No database table data

### Database Table Browser

Table
Limit Offset

No rows loaded

### Log Loss Check

Minutes Create IRIS Ticket

### Appendix C Detections

Minutes Limit Dry run
Query Selectors (comma-separated)

#### State

#### Evaluate

#### History

### IOC Enrich / Evaluate

Type
IOC Value Providers
Malicious threshold Suspicious threshold

#### Enrich

#### Evaluate

#### History

### File IOC (VirusTotal)

File Poll timeout (s) Poll interval (s)
Analysis ID

#### Upload

#### Analysis

#### Evaluate File

### GeoIP Lookup

IP Address

Field | Value
--- | ---

### Create IRIS Ticket

Title Description Customer ID SOC ID

### List IRIS Tickets

Limit Offset

### Shuffle Status

#### Health/Auth

#### Apps/Workflows

### Execute Workflow

Workflow ID Payload (JSON)

### Wazuh Status

### Wazuh Data

Limit Offset
Query (alerts/logs)

### Sync Wazuh to MVP

Minutes Limit Query

### MVP Health & Policy

Policy JSON

Field | Value
--- | ---

### MVP Incident Ingest

### MVP IOC / VPN Evaluate

#### IOC Evaluate JSON

#### VPN Evaluate JSON

### OpenAPI Explorer

Endpoint
Path Params (JSON)
Query Params (JSON) Body (JSON)