> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/siem/orchestration-soar-beta/llm-providers.md). # LLM Providers {% hint style="warning" %} **Please note**: This view is currently in **Beta status**. User interface and functionalities can change at any time. This view is only visible if you have enabled the **Enable beta features** option under **Settings** → [User Account](/docs/manual/english/administration/settings/user-account.md). {% endhint %} *** Connecting an LLM (Large Language Model) provider allows you to use AI resources in the context of the [data lake](/docs/manual/english/platform-usage/siem/data-lake.md) and in [playbooks](/docs/manual/english/platform-usage/siem/orchestration-soar-beta/playbooks.md). *** ## Important Notes **EU Regulation (EU) 024/1689** * Enginsight does not use artificial intelligence (AI) within the meaning of EU Regulation (EU) 024/1689. LLMs can be connected to the Enginsight platform, but this is optional. Connected LLMs do not take any independent actions without human interaction. **Data Protection and Data Processing** * Enginsight does not host or operate its own AI tool and is therefore not an LLM provider. * Based on human interaction (prompting), the Enginsight SIEM sends collected log and event data to the connected LLM via an API. Optionally, the LLM can request additional data from the SIEM context via tool calling. * If an LLM is connected to Enginsight, the organization using it must enter into a data processing agreement (DPA) with the LLM provider covering the processing of personal data. *** Navigate to **SIEM** → **LLM Providers** to show a list of all connected LLM providers. If you have not added an LLM provider yet, this view is empty.

The [LLM provider overview](#llm-providers-overview) provides information such as: * which LLM provider and specific model are being used. * how many LLM resources have already been consumed within a custom usage limit. * whether an LLM provider is active and can be used. You can also [add new LLM providers](#add-llm-provider) and delete existing ones. *** ## Navigation Click the **Text Search** field above the list and enter a search term of your choice to find specific list items more quickly. Click the **Refresh** icon above the list to update all list items. Scroll down the list or adjust the number of results shown per page ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between pages. ### Filtering the List Click the **Filter** icon above the list to filter the list by predefined parameters.

Available Filters

Parameter	Type	Description
Enabled	Boolean	Filter by whether an LLM provider is enabled or not. The following values are available: True: The LLM provider is enabled and can be used in the data lake and in playbooks. False: The LLM provider is disabled.
Provider	String	Filter by a specific LLM provider, or exclude it from the results. All available providers are shown.
Model	String	Filter by a specific LLM, or exclude it from the results. All available models are shown.

Parameter

Type

Description

Enabled

Boolean

Filter by whether an LLM provider is enabled or not.

The following values are available:

True: The LLM provider is enabled and can be used in the data lake and in playbooks.
False: The LLM provider is disabled.

Provider

String

Filter by a specific LLM provider, or exclude it from the results. All available providers are shown.

Model

String

Filter by a specific LLM, or exclude it from the results. All available models are shown.

### Sorting List Items Click the **Sort** icon next to a column name in the table header to sort by that column in ascending or descending order . Click the sort icon above the list to adjust the priority of the applied sorting. A menu opens that shows all columns by which the list is currently sorted. Drag and drop the shown items to change the sorting priority. ### Deleting List Items Select the checkbox next to a list item to select the corresponding item. Alternatively, select the checkbox in the table header to select all list items. The number of selected list entries is now displayed next to the search field. The **Delete** button also appears in the upper-right corner. Click it, then confirm the message that appears by clicking **Delete**. {% hint style="danger" %} **Please note:** Deleted items cannot be restored. {% endhint %} *** ## LLM Providers: Overview The LLM provider overview is structured as a table.

The following information is shown:

Column	Description
Name	Shows the custom name of the LLM provider and an additional description, if provided. The date and time of creation and last edit are also shown. If you selected the respective LLM provider as the default provider, it is marked with the Default label. Click the name of an LLM provider to navigate to the respective edit view. Here you can adjust configured settings and delete the LLM provider.
Provider	Shows the provider of the LLM.
Model	Shows the specific LLM being used.
Usage Limit	Shows the percentage of the defined usage limit for LLM resources that has already been consumed, if configured in the settings.
Enabled	Shows whether the LLM provider is enabled and can therefore be used in the context of the data lake and in playbooks. An enabled LLM provider is indicated by a green check icon . Disabled LLM providers are indicated by a red circle icon .

*** ## Adding an LLM Provider Click **Add LLM Provider** in the upper-right corner to [add a new LLM provider](/docs/manual/english/platform-usage/siem/orchestration-soar-beta/llm-providers/add-llm-provider.md). *** ## LLM-Provider: Edit View Click the custom name of an LLM provider to navigate to the respective edit view. Here you can adjust [configured settings](/docs/manual/english/platform-usage/siem/orchestration-soar-beta/llm-providers/add-llm-provider.md#general-settings) and delete the LLM provider. ### Usage Limits After an LLM provider was added and enabled, you can view details about the current usage to the right of the input fields for a configured usage limit.

The following information is shown:

Column	Description
Last Reset	Shows when the usage limit was last reset.
Utilization	Shows the current number of resources consumed since the last reset.
Usage Limit	Shows the percentage of the usage limit that has already been consumed.

### Actions The following actions are available:

Option	Description
Save Changes	Click Save Changes after adjusting any settings. Please note: Unsaved changes cannot be recovered.
Back	Click Back to return to the list overview.
Remove	Click Remove, then confirm the prompt that appears to delete the object that you are editing. Please note: Deleted objects cannot be recovered.

***