SIEM-AI-Query-Translator

# 🛡️ SIEM AI Query Translator (v1.0.0)

A completely free, AI-powered cybersecurity tool designed to help SOC Analysts, Threat Hunters, and Security Engineers instantly translate natural language questions into highly optimized SIEM queries.

Built with Python, Streamlit, and the Google Gemini API.

---

## 📸 Screenshots



![Main Interface](screenshots/main_interface.png)
*The main application interface showing the SIEM selection and input area.*

![Query Result](screenshots/query_result.png)
*Generated query logic and step-by-step explanation.*

---

## 🌟 Features

* **Multi-SIEM Support:** Generate queries for **Splunk SPL**, **Elastic KQL**, **Microsoft Sentinel KQL**, and **Wazuh SIEM**.
* **Detailed Breakdowns:** Every generated query includes a step-by-step logical explanation so analysts can learn as they hunt.
* **Pro-Tips:** Context-aware optimization tips for the specific platform.
* **100% Free:** Leverages the free tier of the Gemini API.
* **No Database/Storage:** Completely stateless; your queries remain private to your session.

---

## 🚀 Quick Start

1. Clone the repository:
```bash
git clone https://github.com/JuttSahib1999/SIEM-AI-Query-Translator.git
cd SIEM-AI-Query-Translator

```


2. Install requirements:
```bash
pip install -r requirements.txt

```


3. Run the application:
```bash
streamlit run app.py

```


4. Enter your Gemini API key in the sidebar (get a free one at [Google AI Studio](https://aistudio.google.com/)).

---

## 👨‍💻 Author

Created by **Abdul Muqeet Tabraiz**

* **LinkedIn:** [Abdul Muqeet Tabraiz](https://www.linkedin.com/in/abdul-muqeet-tabraiz/)
* **GitHub:** [JuttSahib1999](https://github.com/JuttSahib1999)

---

## 📄 License

This project is licensed under the MIT License - see the `LICENSE` file for details.
README.md
