Data Sources
The AI Security module analyzes AI environment telemetry from gen_ai_* indexes normalized according to the OpenTelemetry GenAI data model.
Connected Sources
| Source | Type | Collection Pipeline | Collected Data | Destination |
|---|---|---|---|---|
Claude Code (.claude/projects, .claude/settings.json) | Local client | Smart Beat Filebeat - Logstash | Requests, responses, tokens, permissions | gen_ai_events, gen_ai_permissions |
Codex (.codex/sessions, .codex/config.toml) | Local client | Smart Beat Filebeat - Logstash | Requests, responses, tokens, permissions | gen_ai_events, gen_ai_permissions |
| Module lookups | Lookup | - | Prompt injections, data leaks, dangerous commands, expected agent permissions, authorized users, allowed connections | Lookup Manager |