Generate Sigma View
POST/api/v1/sigma/views/:source_name
Generate (preview) Sigma view DDL for a source.
A stored view definition drives generation - including its JSON-derived columns - when one exists; otherwise falls back to the static field maps via the source mapper, keeping only the mappings whose column the source's table carries. Returns the DDL string; does NOT execute it against ClickHouse.
Defaults to the data database, since that is where a propagated hunt reads
the view from ({source}_sigma); an explicit database still overrides it.
Request
Responses
- 200
- 401
- 403
- 422
Successful Response
No valid session: the credentials are missing, invalid or expired, or the account behind them is disabled or blocked
Refused: the session lacks the action this route checks, or its account must replace an issued password first
Validation Error