You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/search/copilot-unstructured-logs-beta.md
+2-17Lines changed: 2 additions & 17 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
id: copilot-unstructured-logs
2
+
id: copilot-unstructured-logs-beta
3
3
title: Sumo Logic Copilot - Unstructured Logs Support (Beta)
4
4
description: Streamline your log analysis with Sumo Logic Copilot, our AI-based assistant that simplifies log analysis by letting you ask questions in plain English, even for logs without a well-defined structure.
5
5
---
@@ -26,15 +26,13 @@ Currently, [Copilot works best on structured (JSON) logs](/docs/search/copilot/#
26
26
***Performance and reliability**. Response times and suggestion accuracy are consistent with Copilot’s structured log experience.
27
27
***Security and compliance**. The same strict data handling and privacy standards apply. Unstructured Logs Support builds on Copilot’s secure foundation.
28
28
29
-
<!-- Publish after https://sumologic.atlassian.net/browse/DOCS-832
30
-
31
29
### Powered by Intelliparse mode
32
30
33
31
Copilot now uses [Intelliparse Mode](/docs/search/get-started-with-search/build-search/intelliparse) to extract fields from unstructured logs. This new parsing engine automatically applies parsing logic based on logs already used in your dashboards, allowing Copilot to work with raw logs that don’t follow a consistent format.
34
32
35
33
You’ll get more meaningful results from logs that are already powering visualizations and queries without needing to manually define parsing logic or create Field Extraction Rules (FERs).
36
34
37
-
Copilot uses a hidden `intelliparse` operator behind the scenes. It’s injected into relevant queries to extract fields, making unstructured logs easier to work with—no UI changes required.-->
35
+
Copilot uses a hidden `intelliparse` operator behind the scenes that's injected automatically into relevant queries to extract fields, making unstructured logs easier to work with.
38
36
39
37
### Common use cases
40
38
@@ -43,23 +41,10 @@ Copilot uses a hidden `intelliparse` operator behind the scenes. It’s injected
43
41
***Security insights**. Surface signs of failed logins or anomalies from frequently queried log sources.
44
42
***Smarter prioritization**. Copilot focuses on unstructured logs that are already actively used, helping maximize relevance and value.
45
43
46
-
## Related updates
47
-
48
-
These recent Copilot enhancements make it even easier to work with unstructured logs:
49
-
50
-
***Dynamic conversation titles**. Your queries are automatically titled for easy organization and retrieval.
51
-
***"Open in Copilot" for alerts**. Investigate alerts directly in Copilot without losing context.
52
-
***Suggestion pinning**. Pin suggestions inside a conversation to revisit them later.
53
-
54
44
## FAQ
55
45
56
46
**Will Copilot interpret all my logs?**<br/>
57
47
Copilot prioritizes unstructured logs that are already used in dashboards. This improves the relevance of insights and helps focus on high-value logs.
58
48
59
49
**How is this different from structured log support?**<br/>
60
50
Structured logs have predefined fields, allowing Copilot to map queries directly. For unstructured logs, Copilot uses AI and parsing techniques to infer structure on the fly.
61
-
62
-
<!-- Publish after https://sumologic.atlassian.net/browse/DOCS-832
63
-
**How is Copilot able to understand unstructured logs?**<br/>
64
-
Copilot uses a new parsing engine called [Intelliparse mode](/docs/search/get-started-with-search/build-search/intelliparse). It automatically extracts fields from raw logs using parsers discovered from your dashboards, so you don’t have to define parsing logic or FERs manually.
Copy file name to clipboardExpand all lines: docs/search/get-started-with-search/build-search/intelliparse-beta.md
+6-9Lines changed: 6 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
id: intelliparse
2
+
id: intelliparse-beta
3
3
title: Intelliparse Mode (Beta)
4
4
description: Intelliparse mode extends automatic parsing to unstructured logs, allowing you to search and filter logs even when they don’t follow a consistent format like JSON.
5
5
---
@@ -14,16 +14,14 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
14
14
15
15
This feature is currently available to select customers. Contact your Sumo Logic account representative to request access.
16
16
17
-
We've introduced a new parsing mode in the Log Search UI: Intelliparse mode. It extends automatic parsing to unstructured logs, allowing you to search and filter logs even when they don’t follow a consistent format like JSON.
18
-
19
-
<!-- link to Copilot unstructured logs doc -->
17
+
We've introduced a new Log Search parsing mode called Intelliparse. It extends automatic parsing to unstructured logs, allowing you to search and filter logs even when they don’t follow a consistent format like JSON.
20
18
21
19
## Available parsing modes
22
20
23
21
You can now choose from three parsing options in the log search UI:
24
22
25
23
***Intelliparse (new)**. Combines JSON parsing with automatic parsing of unstructured logs using pre-discovered parsers.
26
-
*[**Auto Parse**](/docs/search/get-started-with-search/build-search/dynamic-parsing). JSON blocks within logs are automatically parsed.
24
+
***Auto Parse**. JSON blocks within logs are automatically parsed ([learn more](/docs/search/get-started-with-search/build-search/dynamic-parsing)).
0 commit comments