Skip to content

Commit 3e95007

Browse files
Merge pull request #302820 from DeCohen/WI408653-remove-preview-tags-sentinel-summary-rules-ga
remove preview tag for summary rules- feature moved to GA
2 parents ef9b8d7 + d626686 commit 3e95007

File tree

3 files changed

+10
-15
lines changed

3 files changed

+10
-15
lines changed

articles/sentinel/feature-availability.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ For more information, see [Microsoft Defender XDR for US Government customers](/
7777
|[Microsoft Purview Information Protection](connect-microsoft-purview.md) |Public preview |Yes |No |No |
7878
|[Microsoft Sentinel solution for Microsoft Business Apps](business-applications/solution-overview.md) | GA |Yes |Yes |Yes |
7979
|[Office 365](connect-services-api-based.md) |GA |Yes |Yes |Yes |
80-
|[Summary rules](summary-rules.md) | Public preview |Yes |No |No |
80+
|[Summary rules](summary-rules.md) | GA |Yes |No |No |
8181
|[Syslog](connect-syslog.md) |GA |Yes |Yes |Yes |
8282
|[Syslog via AMA](connect-cef-syslog-ama.md) |GA |Yes |Yes |Yes |
8383
|[Windows DNS Events via AMA](connect-dns-ama.md) |GA |Yes |Yes |Yes |

articles/sentinel/summary-rules-tutorial.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Summarize insights from raw data in an Auxiliary table to an Analytics table in Microsoft Sentinel (Preview)
2+
title: Summarize insights from raw data in an Auxiliary table to an Analytics table in Microsoft Sentinel
33
description: This article walks you through a sample process of using summary rules to extract actionable analytics from verbose logs ingested into low-cost storage.
44
author: guywi-ms
55
ms.author: guywild
@@ -14,13 +14,11 @@ ms.collection: usx-security
1414

1515
---
1616

17-
# Tutorial: Send logs to low-cost storage and extract actionable analytics using summary rules in Microsoft Sentinel (Preview)
17+
# Tutorial: Send logs to low-cost storage and extract actionable analytics using summary rules in Microsoft Sentinel
1818

1919
This article provides an example of how to use summary rules to aggregate insights from an [auxiliary logs table](basic-logs-use-cases.md) to an Analytics table. In this example, you ingest Common Event Format (CEF) data from Logstash by deploying a custom connector using an ARM template.
2020

2121
> [!IMPORTANT]
22-
> Summary rules are currently in PREVIEW. See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
23-
>
2422
> [!INCLUDE [unified-soc-preview-without-alert](includes/unified-soc-preview-without-alert.md)]
2523
>
2624

articles/sentinel/summary-rules.md

Lines changed: 7 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Aggregate Microsoft Sentinel data with summary rules (Preview)
2+
title: Aggregate Microsoft Sentinel data with summary rules
33
description: Learn how to aggregate large sets of Microsoft Sentinel data across log tiers with summary rules.
44
author: guywi-ms
55
ms.author: guywild
@@ -14,7 +14,7 @@ ms.collection: usx-security
1414

1515
---
1616

17-
# Aggregate Microsoft Sentinel data with summary rules (Preview)
17+
# Aggregate Microsoft Sentinel data with summary rules
1818

1919

2020
Use [summary rules](/azure/azure-monitor/logs/summary-rules) in Microsoft Sentinel to aggregate large sets of data in the background for a smoother security operations experience across all log tiers. Summary data is precompiled in custom log tables and provide fast query performance, including queries run on data derived from [low-cost log tiers](billing.md#data-lake-tier). Summary rules can help optimize your data for:
@@ -28,10 +28,7 @@ Microsoft Sentinel stores summary rule results in custom tables with the **Analy
2828
This article explains how to create summary rules or deploy pre-built summary rule templates in Microsoft Sentinel, and provides examples of common scenarios for using summary rules.
2929

3030
> [!IMPORTANT]
31-
> Summary rules are currently in PREVIEW. See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
32-
>
3331
> [!INCLUDE [unified-soc-preview-without-alert](includes/unified-soc-preview-without-alert.md)]
34-
>
3532
3633
## Prerequisites
3734

@@ -51,9 +48,9 @@ Create a new summary rule to aggregate a specific large set of data into a dynam
5148

5249
1. Open the Summary rule wizard:
5350

54-
- In the Defender portal, select **Microsoft Sentinel > Configuration > Summary rules (Preview)**.
55-
56-
- In the Azure portal, from the Microsoft Sentinel navigation menu, under **Configuration**, select **Summary rules (Preview)**. For example:
51+
- In the Defender portal, select **Microsoft Sentinel > Configuration > Summary rules**.
52+
53+
- In the Azure portal, from the Microsoft Sentinel navigation menu, under **Configuration**, select **Summary rules**. For example:
5754

5855
:::image type="content" source="media/summary-rules/summary-rules-azure.png" alt-text="Screenshot of the Summary rules page in the Azure portal." lightbox="media/summary-rules/summary-rules-azure.png":::
5956

@@ -101,7 +98,7 @@ Create a new summary rule to aggregate a specific large set of data into a dynam
10198
10299
1. Select **Next: Review + create >** > **Save** to complete the summary rule.
103100
104-
Existing summary rules are listed on the **Summary rules (Preview)** page, where you can review your rule status. For each rule, select the options menu at the end of the row to take any of the following actions:
101+
Existing summary rules are listed on the **Summary rules** page, where you can review your rule status. For each rule, select the options menu at the end of the row to take any of the following actions:
105102
106103
- View the rule's current data in the **Logs** page, as if you were to run the query immediately
107104
- View the run history for the selected rule
@@ -144,7 +141,7 @@ To deploy a summary rule template:
144141
145142
## Sample summary rule scenarios in Microsoft Sentinel
146143
147-
This section reviews common scenarios for creating summary rules in Microsoft Sentinel, and our recommendations for how to configure each rule. For more information and examples, see [Summarize insights from raw data in an Auxiliary table to an Analytics table in Microsoft Sentinel (Preview)](./summary-rules-tutorial.md) and [Log sources to use for Auxiliary Logs ingestion](basic-logs-use-cases.md).
144+
This section reviews common scenarios for creating summary rules in Microsoft Sentinel, and our recommendations for how to configure each rule. For more information and examples, see [Summarize insights from raw data in an Auxiliary table to an Analytics table in Microsoft Sentinel](./summary-rules-tutorial.md) and [Log sources to use for Auxiliary Logs ingestion](basic-logs-use-cases.md).
148145
149146
### Quickly find a malicious IP address in your network traffic
150147

0 commit comments

Comments
 (0)