Generate Sigma View
POST/api/v1/sigma/views/:source_name
Generate (preview) Sigma view DDL for a source.
A stored view definition drives generation - including its JSON-derived columns - when one exists. Otherwise falls back to the static field maps via the source mapper, keeping only the mappings whose column the source's table carries. Returns the DDL string. Does NOT execute it against ClickHouse.
Defaults to the data database, since that is where a propagated hunt reads
the view from ({source}_sigma). An explicit database still overrides it.
Request
Responses
- 200
- 401
- 403
- 422
- default
Successful Response
No valid session: the credentials are missing, invalid or expired, or the account behind them is disabled or blocked
Refused: the session lacks the action this route checks, or its account must replace an issued password first. A SCIM route answers a refused action in the RFC 7644 error envelope
Validation Error
Problem details (RFC 9457)