Have you seen the following docs: https://docs.cribl.io/stream/usecase-wiz-api/ The docs mention configuring the collector to get data in and then setting up an event breaker. Additional code can be found here. https://github.com/criblio/collector-templates/blob/main/collectors/rest/wiz/breaker.json

Unfortunately there no wiz pack for additional processing/transformations. https://packs.cribl.io/

Once you have some sample data you can build a pipeline in cribl and roll it up into your own pack. https://cribl.io/blog/how-to-roll-your-own-cribl-pack/