|
| 1 | +--- |
| 2 | +id: copilot-unstructured-logs-beta |
| 3 | +title: Sumo Logic Copilot - Unstructured Logs Support (Beta) |
| 4 | +description: Streamline your log analysis with Sumo Logic Copilot, our AI-based assistant that simplifies log analysis by letting you ask questions in plain English, even for logs without a well-defined structure. |
| 5 | +--- |
| 6 | + |
| 7 | +import useBaseUrl from '@docusaurus/useBaseUrl'; |
| 8 | + |
| 9 | +<head> |
| 10 | + <meta name="robots" content="noindex" /> |
| 11 | +</head> |
| 12 | + |
| 13 | +<p><a href="/docs/beta"><span className="beta">Beta</span></a></p> |
| 14 | + |
| 15 | +This feature is in Beta. For more information, contact your Sumo Logic account executive. |
| 16 | + |
| 17 | +Unstructured Logs Support for [Sumo Logic Copilot](/docs/search/copilot), our AI assistant, enables it to understand and provide insights from raw, text-based logs, even if they don't follow a structured format like JSON. This means you can ask questions in plain English and get meaningful results from nearly any log data, without requiring Field Extraction Rules (FERs). |
| 18 | + |
| 19 | +## What's new |
| 20 | + |
| 21 | +Currently, [Copilot works best on structured (JSON) logs](/docs/search/copilot/#compatible-log-formats). With this beta update, Copilot automatically applies parsing logic to unstructured logs, even if no FERs are configured. |
| 22 | + |
| 23 | +At this stage, Copilot prioritizes unstructured logs that are already used in dashboards, allowing it to surface insights from high-value log sources out-of-the-box. This means it won’t interpret all raw logs yet, but we’re actively working to broaden this support beyond dashboards. |
| 24 | + |
| 25 | +* **Broader coverage**. Copilot now parses and generates insights from unstructured log formats, even without FERs, making it useful for environments that include custom or inconsistent log types. |
| 26 | +* **Improved usability**. Ask questions in natural language. Copilot interprets your intent and suggests relevant searches, even for raw, non-JSON logs. |
| 27 | +* **Performance and reliability**. Response times and suggestion accuracy are consistent with Copilot’s structured log experience. |
| 28 | +* **Security and compliance**. The same strict data handling and privacy standards apply. Unstructured Logs Support builds on Copilot’s secure foundation. |
| 29 | + |
| 30 | +<!---No need to call it out until GA |
| 31 | +### Powered by Intelliparse mode |
| 32 | +Unstructured Logs Support is powered by [Intelliparse mode (Beta)](/docs/search/get-started-with-search/build-search/intelliparse-beta), a new parsing engine that automatically extracts fields from raw logs based on patterns already used in your dashboards. This eliminates the need for manual Field Extraction Rules (FERs) and allows Copilot to surface insights from unstructured logs out-of-the-box. Behind the scenes, Copilot injects a hidden `intelliparse` operator into relevant queries to make unstructured logs easier to work with. |
| 33 | +--> |
| 34 | + |
| 35 | +### Common use cases |
| 36 | + |
| 37 | +* **General log exploration**. Ask questions about unstructured logs that are already used in your dashboards, even if they lack predefined fields. |
| 38 | +* **Error triage**. Investigate frequently visualized log data to surface patterns and recurring issues in unstructured formats. |
| 39 | +* **Security insights**. Detect anomalies or signs of failed logins by querying raw logs already powering security dashboards. |
| 40 | +* **Smarter prioritization**. Copilot focuses on unstructured logs that are visualized in dashboards, helping you get meaningful insights from high-value data sources. |
| 41 | + |
| 42 | +## FAQ |
| 43 | + |
| 44 | +**Will Copilot interpret all my logs?**<br/> |
| 45 | +Copilot prioritizes unstructured logs that are already used in dashboards. This improves the relevance of insights and helps focus on high-value logs. |
| 46 | + |
| 47 | +**How is this different from structured log support?**<br/> |
| 48 | +Structured logs have predefined fields, allowing Copilot to map queries directly. For unstructured logs, Copilot uses AI and parsing techniques to infer structure on the fly. |
0 commit comments