About Unifi Siem Sink
Unifi Siem Sink is an MCP server published by ianchesal in the AI category: a log sink and log MCP server that lets you query your UDM logs with AI.
Recent commit activity is the strongest signal that reported issues will get attention.
Install
git clone https://github.com/ianchesal/unifi-siem-sinkThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (4)
get_categoriesList the distinct event categories currently present in the store (e.g. "ips_alert", "firewall_block", "honeypot", "admin_action", "unknown").
Parameters not published.
get_eventGet a single stored event by id, including its full raw syslog message.
Parameters not published.
get_event_statsGet aggregate event counts grouped by category, severity, or source_ip, optionally within a time range (since/until, ISO8601).
Parameters not published.
list_eventsList stored UniFi SIEM events. Filters: since/until (ISO8601 timestamps, filtered on receipt time), category, severity_min, source_ip/dest_ip (exact match or CIDR, e.g. "10.0.30.0/24"), limit (default 100, max 500), offset.
Parameters not published.
Ask AI
Ask AI about Unifi Siem Sink
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.