You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-**Akamai CPC**.We're excited to introduce the new Akamai CPC app for Sumo Logic. This app enables you to monitor threats and respond to them in real time, enforcing compliance for client-side web applications using rich dashboards and Akamai CPC data. [Learn more](/docs/integrations/saas-cloud/akamai-cpc).
10
12
11
-
We're excited to introduce the new Akamai CPC app for Sumo Logic. This app enables you to monitor threats and respond to them in real time, enforcing compliance for client-side web applications using rich dashboards and Akamai CPC data. [Learn more](/docs/integrations/saas-cloud/akamai-cpc).
13
+
-**Snowflake Logs**. We're excited to introduce the new Snowflake Logs app for Sumo Logic. This app enables you to gain real-time insights into key metrics, query performance, and overall health of the Snowflake environments to optimize operations, support informed decisions, and maximize Snowflake's potential. [Learn more](/docs/integrations/saas-cloud/snowflake-logs).
We're happy to introduce the deactivate and delink option to child orgs, this helps you to deactivate the child org when it is no longer needed and eventually delink it after the 48 hours cooling-off period.
Copy file name to clipboardExpand all lines: docs/cloud-soar/overview.md
+21-14Lines changed: 21 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -153,7 +153,7 @@ Use the **Go To...** menu to access these Cloud SOAR features:
153
153
*[**Entities**](/docs/cloud-soar/incidents-triage/#entities). Manage entities identified across incidents.
154
154
*[**Fields**](/docs/cloud-soar/overview/#custom-fields). Customize fields to better suit your environment.
155
155
*[**General**](#settings). Configure general Cloud SOAR settings.
156
-
*[**Groups**](#groups). Create a group of users and assign a role to all the users in the group.
156
+
*[**Groups**](#groups). Create a group of users that can be added as incident investigators.
157
157
*[**Incidents**](/docs/cloud-soar/incidents-triage/#incidents). Manage security incidents that require investigation and action.
158
158
*[**Incident Labels**](#incident-labels). Define labels for the different types of incidents that will be investigated.
159
159
*[**Notifications**](#notifications). Configure notifications to Cloud SOAR users as well as other external users.
@@ -177,7 +177,7 @@ The **Administration** menu allows you to administer Sumo Logic features, such a
177
177
Use the **Administration** menu to access:
178
178
*[**General**](#general). Configure general Cloud SOAR settings.
179
179
*[**Notifications**](#notifications). Configure notifications to Cloud SOAR users as well as other external users.
180
-
*[**Groups**](#groups). Create a group of users and assign a role to all the users in the group.
180
+
*[**Groups**](#groups). Create a group of users that can be added as incident investigators.
181
181
182
182
183
183
## Settings
@@ -229,26 +229,33 @@ For additional setup needed for Slack, see [Configure Slack for Cloud SOAR](/doc
229
229
230
230
### Groups
231
231
232
-
[**Classic UI**](/docs/cloud-soar/overview#classic-ui). To access groups settings, click the gear icon <img src={useBaseUrl('img/cloud-soar/cloud-soar-settings-icon.png')} alt="Settings menu icon" style={{border: '1px solid gray'}} width="25"/> in the top right, select **Settings**, and on the left menu select **User Management > Groups**.
232
+
A *group* in Cloud SOAR is a collection of users that can be added as incident investigators. When you have a number of users to add as investigators, adding a group of users is faster and easier than adding each user individually. In addition, you can assign everyone in the group the same profile (role), limiting them as incident investigators to only the rights that the profile gives them.
233
233
234
-
[**New UI**](/docs/cloud-soar/overview#new-ui). To access groups settings, in the top menu select **Administration**, and then under **Cloud SOAR Settings** select **Groups**. You can also click the **Go To...** menu at the top of the screen and select **Groups**.
For example, let's say that you have a team of SOC analysts that share responsibility for investigating incidents. You can add all the members of the team to a group and give its members the "Analyst" profile. Then when you need to add the SOC analysts as investigators to incidents, you can simply select the group as the investigator.
238
235
239
236
#### Create a group
240
237
241
-
You can create a group of users and assign a role to all the users in the group. This makes it easy to assign a specialized role to multiple users at once rather than adding the users individually to the role.
242
-
243
-
For example, say there is a group of users with different roles responsible for customer support. Access to a specific incident with restricted privileges needs to be granted to all investigators of the incident. You can create a role with just the needed [Cloud SOAR role capabilities](/docs/manage/users-roles/roles/role-capabilities/#cloud-soar) and select it as the role (also known as a profile) for members of the group. Then when you [add investigators](/docs/cloud-soar/incidents-triage/#add-investigators) for the incident, you can select the group rather than individual users.
244
-
245
-
1. Click the **+** icon next to **Groups**. The **Add Groups** dialog is displayed. <br/><img src={useBaseUrl('img/cloud-soar/cloud-soar-add-group.png')} alt="Add Group dialog" style={{border: '1px solid gray'}} width="600"/>
238
+
1.[**Classic UI**](/docs/cloud-soar/overview#classic-ui). Click the gear icon <img src={useBaseUrl('img/cloud-soar/cloud-soar-settings-icon.png')} alt="Settings menu icon" style={{border: '1px solid gray'}} width="25"/> in the top right, select **Settings**, and on the left menu select **User Management > Groups**.<br/>[**New UI**](/docs/cloud-soar/overview#new-ui). In the top menu select **Administration**, and then under **Cloud SOAR Settings** select **Groups**. You can also click the **Go To...** menu at the top of the screen and select **Groups**.
239
+
1. The **Groups** dialog displays. Click the **+** icon next to **Groups**. <br/><img src={useBaseUrl('img/cloud-soar/cloud-soar-groups.png')} alt="Groups dialog" style={{border: '1px solid gray'}} width="700"/><br/>The **Add Groups** dialog is displayed. <br/><img src={useBaseUrl('img/cloud-soar/cloud-soar-add-group.png')} alt="Add Group dialog" style={{border: '1px solid gray'}} width="600"/>
246
240
1. In **Name** enter a name for the group.
247
-
1. In **Profile** select the role to use for members of the group. These are [roles](/docs/manage/users-roles/roles/) already created in the system.
241
+
1. In **Profile** select the role to assign to members of the group. These are [roles](/docs/manage/users-roles/roles/) already created in the system.
248
242
1. Click **Create**. The empty group is displayed. <br/><img src={useBaseUrl('img/cloud-soar/cloud-soar-example-group.png')} alt="Example group" style={{border: '1px solid gray'}} width="600"/>
249
243
1. Click the **+** icon next to **Members**.
250
244
1. Select the users to add to the group.
251
-
1. Click **Apply**.
245
+
1. Click **Apply**.
246
+
247
+
#### Assign a group as an incident investigator
248
+
249
+
To add a group as an incident investigator, follow the same steps as described in [Add investigators](/docs/cloud-soar/incidents-triage/#add-investigators):
250
+
1.[**Classic UI**](/docs/cloud-soar/overview#classic-ui). At the top of the screen, click **Incidents**. <br/>[**New UI**](/docs/cloud-soar/overview#new-ui). In the main Sumo Logic menu, select **Cloud SOAR > Incidents**. You can also click the **Go To...** menu at the top of the screen and select **Incidents**.
251
+
1. Check the incidents you want to add investigators to.
252
+
1. Click the three-dot kebab menu in the upper left-hand corner of the screen.
1. Select the group to add as investigator of the selected incidents. For example, in the sample screen above, select **SOC Team**.
255
+
:::note
256
+
The **Role** column displays the profile assigned to the members of the group. You cannot change the group's assigned profile (role) here like you can for individual users. You can only change the group's assigned profile on the group itself.
257
+
:::
258
+
1. Click **Apply**. The group is added an an investigator of the selected incidents. While investigating the incidents, members of the group have the rights given by the the role (profile) assigned to members of the group.
Copy file name to clipboardExpand all lines: docs/integrations/microsoft-azure/azure-api-management.md
+3-2Lines changed: 3 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,9 +32,10 @@ When you configure the Event Hubs source or HTTP source, plan your source catego
32
32
33
33
### Configure metrics collection
34
34
35
-
To set up the Azure Metrics source in Sumo Logic, refer to [Azure Metrics Source](/docs/send-data/hosted-collectors/microsoft-source/azure-metrics-source).
35
+
import MetricsSourceBeta from '../../reuse/metrics-source-beta.md';
36
+
37
+
<MetricsSourceBeta/>
36
38
37
-
38
39
:::note
39
40
In the v2 service tiers, API Management has replaced the capacity metric with separate CPU and memory utilization metrics
Copy file name to clipboardExpand all lines: docs/integrations/microsoft-azure/azure-app-service-plan.md
+3-1Lines changed: 3 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,7 +31,9 @@ When you configure the event hubs source or HTTP source, plan your source catego
31
31
32
32
### Configure metrics collection
33
33
34
-
To set up the Azure Metrics source in Sumo Logic, refer to [Azure Metrics Source](/docs/send-data/hosted-collectors/microsoft-source/azure-metrics-source).
34
+
import MetricsSourceBeta from '../../reuse/metrics-source-beta.md';
Copy file name to clipboardExpand all lines: docs/integrations/microsoft-azure/azure-application-gateway.md
+3-1Lines changed: 3 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -42,7 +42,9 @@ When you configure the event hubs source or HTTP source, plan your source catego
42
42
43
43
### Configure metrics collection
44
44
45
-
To set up the Azure Metrics source in Sumo Logic, refer to [Azure Metrics Source](/docs/send-data/hosted-collectors/microsoft-source/azure-metrics-source).
45
+
import MetricsSourceBeta from '../../reuse/metrics-source-beta.md';
Copy file name to clipboardExpand all lines: docs/integrations/microsoft-azure/azure-cache-for-redis.md
+3-1Lines changed: 3 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,7 +32,9 @@ When you configure the event hubs source or HTTP source, plan your source catego
32
32
33
33
### Configure metrics collection
34
34
35
-
To set up the Azure Metrics source in Sumo Logic, refer to [Azure Metrics Source](/docs/send-data/hosted-collectors/microsoft-source/azure-metrics-source).
35
+
import MetricsSourceBeta from '../../reuse/metrics-source-beta.md';
0 commit comments