feat: add example question for authentication failures in specific index
taylorwalton committed
Jul 24, 2025 at 11:51 UTC
8a69262fc519e275e47e1aca4c930aef1daafffc
1 file changed
+5
backend/app/integrations/copilot_mcp/services/example_questions.py
+5
@@ -91,6 +91,11 @@ class ExampleQuestionsService:
91
description="Search for DNS requests made by a specific agent to a known malicious domain",
92
category="search",
93
),
94
+ ExampleQuestion(
95
+ question="Has the agent named `agent_name` had any rule_group3 `authentication_failed` within the index name: `wazuh-customerA*`?",
96
+ description="Check for authentication failures in a specific index for a given agent",
97
+ category="search",
98
+ ),
99
ExampleQuestion(
100
question="How much diskspace is the `wazuh-customerA*` indices consuming?",
101
description="Get the disk space usage for all indices related to customerA",