The ingest AI learns from new telemetry, proposes a mapping, and routes it for analyst review before publishing the connector.

• Auto-classifies JSON, CSV, and log payloads into the shared security schema.
• Review queue surfaces unrecognized feeds so analysts can approve or adjust quickly.
• Audit-evidenced ingestion writes a detailed trail for every accepted field.

Field teams can now activate new cloud, endpoint, or network telemetry without waiting on custom engineering.