get_connector_tables
Retrieve Log Analytics table mappings for any Microsoft Sentinel data connector. Provide a connector ID to get the specific tables it sends data to.
Instructions
Get table mappings for a specific connector ID
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Implementation Reference
- src/tools/solutionTools.ts:177-209 (handler)The handler/execute function for the 'get_connector_tables' tool. It filters cached analysis results by connector_id and returns the matching connector's tables (tableName and detectionMethod).
export const getConnectorTablesTool = { name: 'get_connector_tables', description: 'Get table mappings for a specific connector ID', inputSchema: z.object({ connector_id: z.string().describe('The connector ID to look up'), }), execute: async (args: { connector_id: string }): Promise<ConnectorTables | null> => { await ensureAnalysis(); if (!cachedAnalysisResult) { throw new Error('Analysis results not available'); } const connectorMappings = cachedAnalysisResult.mappings.filter( (m) => m.connectorId === args.connector_id ); if (connectorMappings.length === 0) { return null; } const tables = connectorMappings.map((m) => ({ tableName: m.tableName, detectionMethod: m.detectionMethod || 'unknown', })); return { connectorId: args.connector_id, connectorTitle: connectorMappings[0].connectorTitle, tables, }; }, }; - src/tools/solutionTools.ts:180-182 (schema)Input schema for the tool, requiring a 'connector_id' string parameter validated via Zod.
inputSchema: z.object({ connector_id: z.string().describe('The connector ID to look up'), }), - src/types/index.ts:116-123 (schema)The ConnectorTables interface defining the return type: connectorId, connectorTitle, and an array of tables with tableName and detectionMethod.
export interface ConnectorTables { connectorId: string; connectorTitle: string; tables: Array<{ tableName: string; detectionMethod: string; }>; } - src/tools/solutionTools.ts:410-417 (registration)Registration of the tool in the solutionTools array, alongside other tools (analyzeSolutionsTool, searchSolutionsTool, etc.).
export const solutionTools = [ analyzeSolutionsTool, getConnectorTablesTool, searchSolutionsTool, getSolutionDetailsTool, listTablesTool, validateConnectorTool, ]; - src/tools/index.ts:12-20 (registration)Import and re-export of getConnectorTablesTool from solutionTools, making it available as part of the consolidated MCP tools module.
import { analyzeSolutionsTool, getConnectorTablesTool, searchSolutionsTool, getSolutionDetailsTool, listTablesTool, validateConnectorTool, solutionTools, } from './solutionTools.js';