resolve_pipeline
Resolve a processing pipeline by name or YAML path to retrieve its name, priority, transformations, and dynamic sources, with optional resolution of source data keys.
Instructions
Resolve a processing pipeline (a builtin name like ecs_windows or a YAML file path) and report its name, priority, transformations, and dynamic sources. With resolve_sources, dynamic file/command/HTTP sources are resolved and their data keys reported.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pipeline | Yes | A builtin pipeline name (`ecs_windows`, `fibratus_windows`, `sysmon`) or a path to a pipeline YAML file. | |
| resolve_sources | No | Resolve dynamic sources (file/command/HTTP) and report their data keys. |