merge w/main and edit using meeting slide info

Author: kimsauce

docs/search/copilot-unstructured-logs.md

@@ -1,7 +1,7 @@
 ---
 id: copilot-unstructured-logs
 title: Sumo Logic Copilot - Unstructured Logs Support (Beta)
-description: Streamline your log analysis with Sumo Logic Copilot, our AI-based assistant designed to simplify log analysis by allowing you to ask questions in plain English and providing search suggestions without the need to write log queries.
+description: Streamline your log analysis with Sumo Logic Copilot, our AI-based assistant that simplifies log analysis by letting you ask questions in plain English, even for logs without a well-defined structure.
 keywords:
   - copilot
   - artificial intelligence
@@ -19,29 +19,63 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
 
 <p><a href="/docs/beta"><span className="beta">Beta</span></a></p>
 
-This feature is in Beta. To participate, contact your Sumo Logic account executive.
+This feature is in Beta. To participate, contact your Sumo Logic account executive or [enroll here](https://forms.gle/LozrrAppM9FM94tS9).
 
-Copilot’s Unstructured Logs Support broadens Copilot’s query translation and suggestion capabilities to raw, non-JSON text logs. By removing the need for defined fields, organizations can gain deeper insights from logs that don’t conform to a standard structure. Here are some key highlights:
+Unstructured Logs Support for [Sumo Logic Copilot](/docs/search/copilot), our AI assistant, enables it to understand and provide insights from raw, text-based logs—even if they don't follow a structured format like JSON. This means you can ask questions in plain English and get meaningful results from nearly any log data, without requiring Field Extraction Rules (FERs).
 
-* **Broader coverage**  
-  - Copilot now works with any text-based logs, making it ideal for heterogeneous environments or custom log formats.
-* **Improved usability**  
-  - Receive suggestions and sample searches you can adapt or refine as needed.
-* **Performance and reliability**  
-  - Thorough testing shows that query execution and response times remain consistent with Copilot’s structured log functionality.  
-  - Our ongoing QA focuses on delivering accurate results, even in large and diverse log sets.
-* **Security and compliance**  
-  - We follow the same strict security standards used across all Sumo Logic services.  
-  - Unstructured Logs Support leverages Copilot’s existing safe-handling mechanisms for user data.
-* **Common use cases**  
-  - **Broad keyword searches**. Find relevant entries in raw text (for example, by IP address or error keyword) without needing to define fields.  
-  - **Error analysis & triage**. Quickly locate top errors in logs that lack a clear structure.  
-  - **Security & threat hunting**. Identify suspicious patterns, attacker IOCs, or critical authentication failures in free-form logs.
-* **Future enhancements**  
-  - **Refined language parsing**. We plan to further improve how Copilot detects common terms like "login," "IP," and "authentication."  
-  - **Advanced filtering**. Additional options (for example, time range, user ID, IP, and location) are planned for the final release.
+## What's new
 
+Previously, Copilot worked best on structured (JSON) logs. Now, it automatically applies parsing logic to unstructured logs, even if no FERs are configured. This allows Copilot to interpret logs from many popular data sources out-of-the-box.
 
-## Feedback
+Copilot learns from usage patterns—if a log source is already used in dashboards or commonly queried, it’s more likely to produce strong results.
 
-Organizations interested in participating in the Beta can coordinate with their Sumo Logic account teams. Any anomalies or performance concerns should be raised via normal Sumo Logic support channels.
+* **Broader coverage**. Copilot now parses and generates insights from unstructured log formats, even without FERs, making it useful for environments that include custom or inconsistent log types.
+* **Improved usability**. Ask questions in natural language. Copilot interprets your intent and suggests relevant searches—even for raw, non-JSON logs.
+* **Performance and reliability**. Response times and suggestion accuracy are consistent with Copilot’s structured log experience.
+* **Security and compliance**. The same strict data handling and privacy standards apply. Unstructured Logs Support builds on Copilot’s secure foundation.
+* **Common use cases**.
+  * **Keyword-based search**. Search for IP addresses, error codes, or other patterns without needing a predefined schema.  
+  * **Error triage**. Quickly identify the most common error messages in raw logs to speed up troubleshooting.  
+  * **Threat hunting**. Detect suspicious activity, failed logins, or unusual patterns in plain-text logs.
+* **Smarter prioritization**. Frequently used data sources (such as those in dashboards or frequent queries) are prioritized for deeper insights.
+
+## Tips and best practices
+
+* Start with common natural language queries, like:
+  - “Show failed login attempts for the past 24 hours”
+  - “Find logs with IP 192.0.2.0”
+  - “What are the top 5 errors from nginx logs today?”
+* Use dashboards to monitor your log sources. Copilot performs better when logs are part of existing queries and visualizations.
+* Logs with clear timestamps, separators (like commas or tabs), and consistent patterns tend to yield better results.
+
+## Related updates
+
+These recent Copilot enhancements make it even easier to work with unstructured logs:
+
+* **Dynamic conversation titles**. Your queries are automatically named for easy organization and retrieval.
+* **"Open in Copilot" for alerts**. Investigate alerts directly in Copilot without losing context.
+* **Suggestion pinning**. Pin suggestions inside a conversation to revisit them during your investigation.
+
+## FAQ
+
+**Does this replace Field Extraction Rules (FERs)?**<br/>
+No. Copilot works with or without FERs. While FERs are useful for structured analysis, they're no longer required for Copilot to interpret unstructured logs.
+
+**Will Copilot interpret all my logs?**<br/>
+Copilot prioritizes data sources that are already used in dashboards or frequent queries. This improves the relevance of insights and helps focus on high-value logs.
+
+**How is this different from structured log support?**<br/>  
+Structured logs have predefined fields, allowing Copilot to map queries directly. For unstructured logs, Copilot uses AI and parsing techniques to infer structure on the fly.
+
+
+## Feedback and support
+
+We’re actively looking for customers to participate in the beta and provide feedback. Ideal participants:
+
+* Use dashboards for monitoring across most of their data sources  
+* Have some hands-on experience with Copilot
+* Are willing to provide detailed feedback during the beta  
+
+👉 [Click here to enroll](https://forms.gle/LozrrAppM9FM94tS9)
+
+To report issues or share feedback, reach out through your Sumo Logic account team.