Skip to content

Commit 33ccfa2

Browse files
jpipkin1kimsauce
andauthored
DOCS-1214 - Move sumobaseurl text (#5969)
* Move sumobaseurl text * Update docs/cse/administration/create-cse-context-actions.md Co-authored-by: Kim (Sumo Logic) <[email protected]> --------- Co-authored-by: Kim (Sumo Logic) <[email protected]>
1 parent 5c38c8c commit 33ccfa2

File tree

1 file changed

+2
-6
lines changed

1 file changed

+2
-6
lines changed

docs/cse/administration/create-cse-context-actions.md

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -87,6 +87,8 @@ When you save the action, the URL template will be populated with your Sumo Logi
8787

8888
`{{sumobaseurl}}/ui/#/search/@{{timestamp[ms]-30m}}@_index=sec_record* AND user_username = {{value}}`
8989

90+
The `{{sumobaseurl}}` parameter applies to context actions that run a Sumo Logic log search. Assuming your Cloud SIEM instance is configured to communicate with the Sumo Logic platform, when you create an action that runs a Sumo Logic search, Cloud SIEM will automatically insert this placeholder in your URL template—you don’t need to explicitly insert `{{sumobaseurl}}` placeholder yourself.
91+
9092
### Create an URL to an external service
9193

9294
To create a URL to be sent to an external service, enter the URL in the format required by the external service, and use the `{{value}}` parameter placeholder for the target entity, record field, or IOC. 
@@ -121,12 +123,6 @@ The table below defines the parameters you can use in the URL template for a con
121123

122124
You can insert any field from the target of a context action into the action URL with the `{{field_name}}` placeholder. For example, you could include `device_ip` in the URL with `{{device_ip}}`.  
123125

124-
### Sumo Logic Base URL
125-
126-
The `{{sumobaseurl}}` parameter applies to context actions that run a Sumo Logic log search.
127-
128-
Assuming your Cloud SIEM instance is configured to communicate with the Sumo Logic platform, when you create an action that runs a Sumo Logic search, Cloud SIEM will automatically insert this placeholder in your URL template—you don’t need to explicitly insert `{{sumobaseurl}} `placeholder yourself.
129-
130126
### Timestamp
131127

132128
When you run an action on a Cloud SIEM record, if that record has a [timestamp](/docs/cse/schema/schema-attributes) field value, you can insert the timestamp in UTC format into the URL using the `{{timestamp}}` parameter.

0 commit comments

Comments
 (0)