> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wirespeed.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Preview custom detection matches



## OpenAPI

````yaml https://api.wirespeed.co/v1/openapi.json post /v1/detection/custom/preview
openapi: 3.0.0
info:
  title: Wirespeed API
  description: The public Wirespeed API. v1 is the first stable contract.
  version: '1.0'
  contact: {}
servers:
  - url: https://api.wirespeed.co
security: []
tags: []
paths:
  /v1/detection/custom/preview:
    post:
      tags:
        - Detection
      summary: Preview custom detection matches
      operationId: DetectionController_previewCustomDetection
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/VerifyCustomDetectionDto'
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CustomDetectionMatchPreviewResult'
        '422':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HttpError'
      security:
        - bearer: []
components:
  schemas:
    VerifyCustomDetectionDto:
      type: object
      properties:
        sourceTable:
          type: string
          description: SIEM 2.0 source table for the WHERE predicate
        query:
          type: string
          description: WHERE predicate to validate against the source table
      required:
        - sourceTable
        - query
    CustomDetectionMatchPreviewResult:
      type: object
      properties:
        data:
          description: Sample rows returned by the custom detection scan in the last hour
          type: array
          items:
            $ref: '#/components/schemas/CustomDetectionMatchPreviewRow'
        count:
          type: number
          description: Total sample rows returned (must be fewer than 100)
        queryTimeMs:
          type: number
          description: Preview query execution time in milliseconds
        rowsRead:
          type: number
          description: Rows scanned while evaluating the preview
        bytesRead:
          type: number
          description: Bytes scanned while evaluating the preview
      required:
        - data
        - count
        - queryTimeMs
        - rowsRead
        - bytesRead
    HttpError:
      type: object
      properties:
        message:
          type: string
        statusCode:
          type: number
      required:
        - message
        - statusCode
    CustomDetectionMatchPreviewRow:
      type: object
      properties:
        _wspd_id:
          type: string
          description: Primary evidence row id (_wspd_id)
        _wspd_integration_slug:
          type: string
          description: Integration slug for the matched row
        _wspd_action_slug:
          type: string
          description: Action slug for the matched row
        _wspd_table:
          type: string
          description: Source table for the matched row
        _wspd_time:
          type: string
          description: Event time for the matched row
      required:
        - _wspd_id
        - _wspd_integration_slug
        - _wspd_action_slug
        - _wspd_table
        - _wspd_time
  securitySchemes:
    bearer:
      scheme: bearer
      bearerFormat: JWT
      type: http

````