Community template registry
Forge realistic security logs
High-fidelity event templates for SIEM validation, detection testing, and analytics stress runs — pulled from the vendors you already run.
01 · The flow
From catalog to events in three steps
No dashboard maze. Pick a source, pull the template, generate — the same path the CLI and API use.
Pick a vendor
Browse Palo Alto, AWS, CrowdStrike, and the rest of the community catalog by product and data source.
Pull a template
Each event type ships as Jinja2 plus metadata — formats, fields, and frequencies already defined.
Generate
Run via MELTr CLI or API. Replay CEF, JSON, syslog — whatever your pipeline expects.
02 · Catalog
Featured vendors
Most popular and actively maintained packages
Apache Software Foundation
The Apache Software Foundation provides open source software for web infrastructure, including the widely-used Apache HTTP Server, supporting millions of websites and applications worldwide.
Armis Security
Armis is an agentless security platform that discovers, monitors, and secures all connected devices across IT, IoT, OT, and IoMT environments. Provides visibility and threat detection for managed and unmanaged devices.
Amazon Web Services
Amazon Web Services (AWS) is a comprehensive cloud computing platform providing infrastructure, platform, and software services.
Check Point Software Technologies
Check Point Software Technologies is a leading provider of cybersecurity solutions including firewalls, VPN, threat prevention, and unified security management platforms.
Claroty
Industrial cybersecurity company providing OT, IoT, and ICS security solutions including asset discovery, vulnerability management, and threat detection for operational technology environments.
CrowdStrike
Leading cybersecurity company providing cloud-delivered endpoint and workload protection
03 · Fresh
Recent templates
http-completed
Zeek 8.0.0 conn.log completed HTTP/TCP sample profile, coherent fixed counters/state/history, registry endpoints and fresh time/UID/source port.
a-query-success
Zeek 8.0.0 dns.log successful UDP IN/A response, one IPv4 answer, registry endpoints and question/answer, fresh Unix time and Faker IDs/port.
node-key-expiry-update
Documented NODE key-expiry update with registry actor/node identities, fresh operation group ID and derived future expiry.
user-login
Slack Audit API v1 user_login: identical registry actor/entity, enterprise context, mapped client, fresh UUID/session ID and Unix seconds.
Ready to start forging?
Install the CLI, pull a template, generate your first stream.