Observability Center

Stream governed AI events — identity, decisions, approvals, evidence — into enterprise security monitoring. One normalized model, many providers.

6 providers

Demo datasetStore: Demo Data

Illustrative pilot dataset — figures model a representative enterprise deployment.

2 metrics live in this mode Switch to live data

Provider Health

5/7

1 degraded · 0 error

Queue Depth

695

Events awaiting delivery

Throughput

2,480/min

Across enabled providers

Avg Latency

151 ms

Mean delivery latency

Dead-Letter

Dropped after max retries

Delivery Pipeline

Event flow across the delivery pipeline (24h). Queue, delivery, retry, and dead-letter.

Queued

695

Delivered

1,465

Retried

Failed

Dropped

Throughput: 2,480/minAvg latency: 151 msQueue depth: 695

Connected Providers

Every adapter consumes the same normalized event. Health uses one model across providers.

Microsoft Sentinel

ECS

Healthy

Success99.6%

Retry0.8%

Latency124 ms

Queue18

Throughput420/m

Heartbeat2mo ago

Splunk

HEC

Healthy

Success99.9%

Retry0.3%

Latency92 ms

Queue32

Throughput510/m

Heartbeat2mo ago

Elastic

ECS

Healthy

Success99.8%

Retry0.5%

Latency71 ms

Queue12

Throughput480/m

Heartbeat2mo ago

Generic Syslog

SYSLOG5424

Healthy

Success98.2%

Retry1.6%

Latency41 ms

Queue5

Throughput600/m

Heartbeat2mo ago

IBM QRadar

LEEF

Degraded

Success92.4%

Retry12.5%

Latency168 ms

Queue540

Throughput210/m

Heartbeat2mo ago

Google Chronicle

UDM

Healthy

Success96.1%

Retry6.2%

Latency410 ms

Queue88

Throughput260/m

Heartbeat2mo ago

Generic Webhook

JSON

Disabled

Success100%

Retry0%

Latency0 ms

Queue0

Throughput0/m

Heartbeat—

Retry Queue

Transient failures retry with exponential backoff; exhausted items dead-letter.

Event	Provider	Attempt	Reason	Next
AUD-3b1d77c0a9	qradar	2	503 from collector	retry 2mo ago
AUD-7c9a1e3f5b	chronicle	1	timeout	retry 2mo ago
OBS-aa11bb22cc	syslog	5	connection refused	Dead-letter

Event Explorer

Normalized governance events — a view over the hash-chained audit log, not a copy.

Event	Category	Severity	Actor	Source	When	Chain
identity.logout Signed out.	identity	info	Lena Petrov	identity	2mo ago	0x79bf4c…2ceb
identity.session_expired Session expired after inactivity.	identity	medium	Marcus Hale	identity	2mo ago	0xaf28f3…f87e
trust.package_verified Evidence package verified — trust level: signed (mock).	evidence	info	Marcus Hale	evidence	2mo ago	0x4db925…1dd3
identity.login Login via Entra ID (MFA enforced).	identity	info	Jermaine Merritt	identity	2mo ago	0xf3109a…df37
report.exported Exported Executive Summary report.	report export	info	Jermaine Merritt	reporting	2mo ago	0x04336d…3905
trust.signature_created Mock signature created (not legally binding).	evidence	low	cdx-dev-key-01	evidence	2mo ago	0x4d8fb5…2069
trust.timestamp_created Mock RFC 3161 timestamp issued for package digest.	evidence	low	CodexDominion Mock TSA	evidence	2mo ago	0x7c62d0…a42e
trust.hashchain_verified Audit hash-chain re-derived and verified intact.	evidence	low	trust-service	evidence	2mo ago	0xc960f2…1c9c
procurement.exported Exported procurement package (ZIP).	procurement export	info	Lena Petrov	procurement	2mo ago	0x623eb1…ba25
identity.login Login via Entra ID (MFA satisfied).	identity	info	Sarah Mitchell	identity	2mo ago	0x7c860f…4859

27 events · page 1 of 3

Observability Reports

Operations documents — reuse the shared report shell.

Connected Providers

Every adapter consumes the same normalized event. Health uses one model across providers.

Microsoft Sentinel

ECS

Healthy

Success99.6%

Retry0.8%

Latency124 ms

Queue18

Throughput420/m

Heartbeat2mo ago

Splunk

HEC

Healthy

Success99.9%

Retry0.3%

Latency92 ms

Queue32

Throughput510/m

Heartbeat2mo ago

Elastic

ECS

Healthy

Success99.8%

Retry0.5%

Latency71 ms

Queue12

Throughput480/m

Heartbeat2mo ago

Generic Syslog

SYSLOG5424

Healthy

Success98.2%

Retry1.6%

Latency41 ms

Queue5

Throughput600/m

Heartbeat2mo ago

IBM QRadar

LEEF

Degraded

Success92.4%

Retry12.5%

Latency168 ms

Queue540

Throughput210/m

Heartbeat2mo ago

Google Chronicle

UDM

Healthy

Success96.1%

Retry6.2%

Latency410 ms

Queue88

Throughput260/m

Heartbeat2mo ago

Generic Webhook

JSON

Disabled

Success100%

Retry0%

Latency0 ms

Queue0

Throughput0/m

Heartbeat—

Event

Provider

Attempt

Reason

AUD-3b1d77c0a9

qradar

503 from collector

retry 2mo ago

AUD-7c9a1e3f5b

chronicle

timeout

retry 2mo ago

OBS-aa11bb22cc

syslog

connection refused

Dead-letter

Event Explorer

Normalized governance events — a view over the hash-chained audit log, not a copy.

Event	Category	Severity	Actor	Source	When	Chain
identity.logout Signed out.	identity	info	Lena Petrov	identity	2mo ago	0x79bf4c…2ceb
identity.session_expired Session expired after inactivity.	identity	medium	Marcus Hale	identity	2mo ago	0xaf28f3…f87e
trust.package_verified Evidence package verified — trust level: signed (mock).	evidence	info	Marcus Hale	evidence	2mo ago	0x4db925…1dd3
identity.login Login via Entra ID (MFA enforced).	identity	info	Jermaine Merritt	identity	2mo ago	0xf3109a…df37
report.exported Exported Executive Summary report.	report export	info	Jermaine Merritt	reporting	2mo ago	0x04336d…3905
trust.signature_created Mock signature created (not legally binding).	evidence	low	cdx-dev-key-01	evidence	2mo ago	0x4d8fb5…2069
trust.timestamp_created Mock RFC 3161 timestamp issued for package digest.	evidence	low	CodexDominion Mock TSA	evidence	2mo ago	0x7c62d0…a42e
trust.hashchain_verified Audit hash-chain re-derived and verified intact.	evidence	low	trust-service	evidence	2mo ago	0xc960f2…1c9c
procurement.exported Exported procurement package (ZIP).	procurement export	info	Lena Petrov	procurement	2mo ago	0x623eb1…ba25
identity.login Login via Entra ID (MFA satisfied).	identity	info	Sarah Mitchell	identity	2mo ago	0x7c860f…4859

27 events · page 1 of 3

Observability Reports

Operations documents — reuse the shared report shell.