AI
OpenAI
Use OpenAI models for grounded search, summarization, enrichment, and product workflows over Mach5 data.
AIWorkflowsSearch
Integrations
Connect security product workloads to the real world.
Bring models, streams, object stores, lakehouses, warehouses, SaaS systems, identity data, email, and workflow actions into one product-serving data layer.
Product-serving data layer
Search
event search, timelines, dashboards
Streaming
ingest, transform, enrich, backfill
Derived data
fresh views, aggregates, materialized outputs
Serve
tenant-aware low-latency product APIs
Read
bring source data into product and evidence context.
Act
send approved updates through trusted workflow surfaces.
Serve
use integrations from streaming, query, AI, and product workflows.
AI providers
Hosted and local models for grounded product workflows, search, summarization, and enrichment.
A
Anthropic
Connect Claude models to security data, query context, and controlled workflow assistance.
AIMCPWorkflows
G
Google Gemini
Use Gemini models in product workflows that need grounded answers, charts, summaries, and enrichment.
AIAnalyticsWorkflows
Q
Qwen
Bring Qwen-family models into private or managed security data workflows.
AIDevWorkflows
M
Mistral
Use Mistral models for AI-assisted search, summarization, and operational context over Mach5 data.
AISearch
OL
Ollama
Run local models for private development, demos, and controlled AI workflows against Mach5 data.
Local AIDev
Build, identity, and collaborate
Code, identity, teams, messages, and workflow notifications.
GitHub
Bring repository, pull request, Actions, audit, issue, and security-alert data into product workloads.
IngestSQLWorkflow
Slack
Read conversations and audit data, then send notifications from trusted workflows.
ActionsSQLWorkflow
Okta
Use identity events, users, groups, apps, sessions, policies, and lifecycle actions.
IdentityIngestSQL
Streaming and event buses
Kafka-compatible and cloud-native event streams for high-volume security telemetry.
Apache Kafka
Ingest high-volume operational streams and security telemetry into Mach5 workloads.
StreamingIngestTelemetry
RP
Redpanda
Use Redpanda-compatible Kafka streams for fast event ingestion and replayable product pipelines.
Kafka APIIngestStreaming
CC
Confluent Cloud
Connect managed Kafka topics for cloud-scale security and operational event pipelines.
Kafka APIIngestCloud
Amazon MSK
Ingest from AWS-managed Kafka topics for cloud, identity, application, and telemetry workloads.
AWSKafka APIIngest
Azure Event Hubs
Use Event Hubs and its Kafka-compatible endpoint for Azure event streams and operational data.
AzureKafka APIStreaming
Google Cloud Pub/Sub
Use Pub/Sub as the Google Cloud event backbone for product-backed investigation and telemetry flows.
GCPStreamingIngest
Google Cloud Managed Kafka
Use Google-managed Apache Kafka for Kafka-native streaming pipelines on Google Cloud.
GCPKafka APIIngest
Lakehouse and table formats
Open table formats and cloud data platforms for long-retention security data and product analytics.
Apache Iceberg
Query and ingest Iceberg-backed data without forcing every dataset through a hot search path.
TablesIngestSQL
Microsoft OneLake
Use OneLake as a lakehouse source for operational evidence, long-retention data, and product analytics.
LakehouseExternal DataSQL
Google BigLake
Bring BigLake-managed datasets into Mach5 evidence workflows and cross-source investigations.
LakehouseExternal DataSQL
CF
Cloudflare Data Platform
Connect Cloudflare R2 and Iceberg-backed data to low-latency search, analytics, and product workloads.
R2IcebergSQL
Warehouses and search
Analytical systems and search platforms that Mach5 can enrich, query, migrate, or extend.
Snowflake
Use Snowflake data alongside Mach5 search and product workflows for enrichment and analytics.
WarehouseSQLFederation
BigQuery
Bring BigQuery datasets into dashboards, investigations, and product analytics workloads.
WarehouseSQLFederation
Databricks
Connect lakehouse data and Delta/Iceberg tables to Mach5 product workloads and evidence views.
LakehouseSQLWorkloads
ES
Elasticsearch
Query and migrate Elasticsearch-style workloads while preserving search semantics and product experiences.
SearchMigrationOpenSearch API
OS
OpenSearch
Use OpenSearch-compatible APIs and migration paths for search workloads that need lower operational burden.
SearchOpenSearch APIMigration
TR
Trino
Use Trino integration paths for SQL access and interoperability with existing analytical environments.
SQLFederationConnector
Object storage
Object data for ingest, preview, long retention, and product analytics.
Amazon S3
List, read, preview, and ingest object data from S3-backed product workloads.
IngestPreviewSQL
Google Cloud Storage
Use GCS buckets as product data sources without moving everything first.
IngestPreviewSQL
Azure Blob Storage
Connect containers for object listing, streaming reads, and bounded previews.
IngestPreviewSQL
MinIO
Use S3-compatible MinIO buckets for local, private, or self-managed object-storage workloads.
S3 APILocalIngest
Mailbox ingest and workflow-driven email delivery.
