{"apiVersion":"v1","directorySlug":"virtualmetric-mcp-3d7d35d7ab","title":"VirtualMetric","description":"VirtualMetric helps SOC teams cut SIEM ingestion costs by up to 90%, close visibility gaps, and give every tool detection-ready data.","pageUrl":"https://www.mcpbundles.com/skills/virtualmetric-mcp-3d7d35d7ab","connectPath":"importable","connectAction":"import_server","catalogListing":false,"bundleSlug":null,"listingKind":"remote_mcp","kind":"provider","transportUrl":"https://mcp.virtualmetric.com/mcp","hostedMcpUrl":null,"toolCount":11,"toolInventoryStatus":"observed","refreshedAt":"2026-11-03T13:26:00.516172+00:00","registryName":"com.virtualmetric/virtualmetric-mcp-3d7d35d7ab","registryVersion":"2026.11.3","registryEligible":true,"tools":[{"name":"test_pipeline","description":"Run a sample log through a pipeline config and return the normalized output as JSON. For a multi-file pack (an entry pipeline that calls others via `pipeline`/IngestPipeline), put every pipeline in `pipeline` as a YAML list or `---`-separated docs and set `name` to the entry.","inputSchema":{"type":"object","required":["pipeline","input"],"properties":{"name":{"type":"string"},"input":{"type":"string"},"verbose":{"type":"boolean"},"pipeline":{"type":"string"}}},"logicalName":"test_pipeline","displayName":"test_pipeline","title":"test_pipeline","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"validate_pipeline","description":"Run a sample log through a pipeline config and report true/false against an expected output. For a multi-file pack, put every pipeline in `pipeline` (YAML list or `---`-separated docs) and set `name` to the entry.","inputSchema":{"type":"object","required":["pipeline","input","expected"],"properties":{"name":{"type":"string"},"input":{"type":"string"},"verbose":{"type":"boolean"},"expected":{"type":"string"},"pipeline":{"type":"string"}}},"logicalName":"validate_pipeline","displayName":"validate_pipeline","title":"validate_pipeline","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"diff_pipeline","description":"Show expected vs actual output and a unified diff. For a multi-file pack, put every pipeline in `pipeline` (YAML list or `---`-separated docs) and set `name` to the entry.","inputSchema":{"type":"object","required":["pipeline","input","expected"],"properties":{"name":{"type":"string"},"input":{"type":"string"},"verbose":{"type":"boolean"},"expected":{"type":"string"},"pipeline":{"type":"string"}}},"logicalName":"diff_pipeline","displayName":"diff_pipeline","title":"diff_pipeline","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"validate_schema","description":"Normalize a sample log with a pipeline config, then check the output against a target schema (ASIM table, ocsf:<class>, udm:<...>, or custom) using the check_schema processor. Reports missing/extra/type-mismatch fields.","inputSchema":{"type":"object","required":["pipeline","input","schema"],"properties":{"mode":{"type":"string"},"name":{"type":"string"},"input":{"type":"string"},"schema":{"type":"string"},"optional":{"type":"boolean"},"pipeline":{"type":"string"},"recommended":{"type":"boolean"},"schema_type":{"type":"string"}}},"logicalName":"validate_schema","displayName":"validate_schema","title":"validate_schema","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"convert_cribl_pipeline","description":"Convert a Cribl Stream pipeline into an equivalent VirtualMetric DataStream pipeline (YAML). Input is a Cribl pipeline export (its on-disk shape: top-level `description`/`groups`/`functions`, each function an id/conf/filter). This is the FIRST step when migrating a Cribl pipeline — then run test_pipeline/validate_pipeline on the returned YAML to verify behavior. Disabled Cribl functions (and functions in disabled groups) are converted as disabled processors, not dropped, so the result is a faith","inputSchema":{"type":"object","required":["cribl"],"properties":{"name":{"type":"string"},"cribl":{"type":"string"}}},"logicalName":"convert_cribl_pipeline","displayName":"convert_cribl_pipeline","title":"convert_cribl_pipeline","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"convert_kql_query","description":"Convert a KQL query (an ASIM parser function, or a raw KQL query) into an equivalent VirtualMetric DataStream pipeline (YAML). Input may be a raw KQL query or a full ASIM parser YAML export (ParserQuery/ParserName are extracted automatically). This is the FIRST step when migrating an ASIM parser — then run test_pipeline/validate_pipeline on the returned YAML to verify behavior.","inputSchema":{"type":"object","required":["query"],"properties":{"name":{"type":"string"},"query":{"type":"string"}}},"logicalName":"convert_kql_query","displayName":"convert_kql_query","title":"convert_kql_query","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"convert_logstash_pipeline","description":"Convert a Logstash pipeline configuration (.conf with input/filter/output sections) into an equivalent VirtualMetric DataStream pipeline (YAML). Filter plugins become native processors, Logstash conditionals become native `if:` gates / groups, and input/output sections are summarized as comments (devices and targets are configured separately in DataStream). Unsupported plugins/options degrade to comment processors plus Warning lines in the pipeline description — review those before trusting the","inputSchema":{"type":"object","required":["logstash"],"properties":{"name":{"type":"string"},"logstash":{"type":"string"}}},"logicalName":"convert_logstash_pipeline","displayName":"convert_logstash_pipeline","title":"convert_logstash_pipeline","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"list_processors","description":"List available pipeline processors (188), optionally filtered by a search term. Returns each processor's key and one-line description.","inputSchema":{"type":"object","properties":{"search":{"type":"string"}}},"logicalName":"list_processors","displayName":"list_processors","title":"list_processors","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"get_processor","description":"Get a processor's full option schema (field, type, required) and a link to its documentation.","inputSchema":{"type":"object","required":["name"],"properties":{"name":{"type":"string"}}},"logicalName":"get_processor","displayName":"get_processor","title":"get_processor","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"list_skills","description":"List the embedded authoring guides (how to build a pack, build/edit a pipeline, taxonomy and tooling overview) with their descriptions.","inputSchema":{"type":"object","properties":{}},"logicalName":"list_skills","displayName":"list_skills","title":"list_skills","annotations":{"untrustedContentHint":true,"readOnlyHint":true}},{"name":"get_skill","description":"Return the full guidance document for an authoring guide. Read the relevant guide before creating or editing a pack/pipeline to follow the conventions and avoid the known gotchas.","inputSchema":{"type":"object","required":["name"],"properties":{"name":{"type":"string"}}},"logicalName":"get_skill","displayName":"get_skill","title":"get_skill","annotations":{"untrustedContentHint":true,"readOnlyHint":true}}],"toolSource":"directory_preview","agentAction":"both","installLinks":[{"id":"cursor","label":"Cursor","href":"cursor://anysphere.cursor-deeplink/mcp/install?name=VirtualMetric&config=eyJ1cmwiOiAiaHR0cHM6Ly9tY3AudmlydHVhbG1ldHJpYy5jb20vbWNwIn0%3D"},{"id":"vscode","label":"VS Code","href":"vscode:mcp/install?%7B%22name%22%3A%22VirtualMetric%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.virtualmetric.com%2Fmcp%22%7D"},{"id":"vscode-insiders","label":"VS Code Insiders","href":"vscode-insiders:mcp/install?%7B%22name%22%3A%22VirtualMetric%22%2C%22type%22%3A%22http%22%2C%22url%22%3A%22https%3A%2F%2Fmcp.virtualmetric.com%2Fmcp%22%7D"},{"id":"claude-web","label":"Claude.ai","href":"https://claude.ai/customize/connectors?modal=add-custom-connector&connectorName=VirtualMetric&connectorUrl=https%3A%2F%2Fmcp.virtualmetric.com%2Fmcp"},{"id":"codex","label":"Codex","copyText":"codex mcp add \"VirtualMetric\" --url \"https://mcp.virtualmetric.com/mcp\""},{"id":"chatgpt","label":"ChatGPT","href":"https://www.mcpbundles.com/docs/integrations/chatgpt"}],"catalogUrl":"https://www.mcpbundles.com/api/directory/v1/servers/virtualmetric-mcp-3d7d35d7ab","callUrl":"https://www.mcpbundles.com/api/directory/v1/servers/virtualmetric-mcp-3d7d35d7ab/tools/{tool}","mcpServerUrl":"https://mcp.virtualmetric.com/mcp","liveCatalogUrl":"https://www.mcpbundles.com/api/directory/v1/servers/virtualmetric-mcp-3d7d35d7ab?live=1"}