firewalla-mcp-server/dist/config/correlation-patterns.d.ts

Model Context Protocol (MCP) server for Firewalla MSP API - Provides real-time network monitoring, security analysis, and firewall management through 28 specialized tools compatible with any MCP client

/**
 * Configurable correlation patterns for cross-reference searches
 * Extracted from hardcoded patterns to improve maintainability
 */
import type { EntityType } from '../validation/field-mapper.js';
/**
 * Definition of a correlation pattern with its fields and description
 */
export interface CorrelationPattern {
    id: string;
    name: string;
    description: string;
    fields: string[];
    entityTypes: EntityType[];
    priority: 'high' | 'medium' | 'low';
    useCase: string;
}
/**
 * Common correlation patterns organized by category
 */
export interface CorrelationPatternCatalog {
    network: CorrelationPattern[];
    security: CorrelationPattern[];
    device: CorrelationPattern[];
    temporal: CorrelationPattern[];
    geographic: CorrelationPattern[];
    application: CorrelationPattern[];
}
/**
 * Default correlation patterns configuration
 */
export declare const DEFAULT_CORRELATION_PATTERNS: CorrelationPatternCatalog;
/**
 * Common field combinations that work well together (extracted from hardcoded triples)
 */
export declare const COMMON_FIELD_COMBINATIONS: {
    security_triples: string[][];
    network_triples: string[][];
    device_triples: string[][];
    application_triples: string[][];
};
/**
 * Update correlation patterns at runtime
 */
export declare function updateCorrelationPatterns(newPatterns: Partial<CorrelationPatternCatalog>): void;
/**
 * Get current correlation patterns
 */
export declare function getCorrelationPatterns(): CorrelationPatternCatalog;
/**
 * Get patterns by entity types
 */
export declare function getPatternsByEntityTypes(entityTypes: EntityType[]): CorrelationPattern[];
/**
 * Get patterns by priority
 */
export declare function getPatternsByPriority(priority: 'high' | 'medium' | 'low'): CorrelationPattern[];
/**
 * Get field combinations based on patterns and entity types
 */
export declare function getRecommendedFieldCombinations(entityTypes: EntityType[]): string[][];
/**
 * Find patterns by field combination
 */
export declare function findPatternsByFields(fields: string[]): CorrelationPattern[];
//# sourceMappingURL=correlation-patterns.d.ts.map