Skip to content

Commit 3aac0cc

Browse files
committed
Add FAQs
1 parent 2231a8d commit 3aac0cc

File tree

1 file changed

+12
-3
lines changed

1 file changed

+12
-3
lines changed

docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md

Lines changed: 12 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -113,19 +113,28 @@ The left pane of the insight details page displays detailed information about th
113113
1. **Comments.** Displays any comments that have been made on the insight, and a field for adding a comment.
114114
1. **Show Comments/History.** The controls allow you to switch between viewing the insight's comments and history.
115115

116-
117116
### Insight summary
118117

119118
The insight **Summary** pane provides a concise, actionable summary of threat incidents based on triggered signals. It consolidates key details to facilitate quick understanding and response by security teams. The summary is generated by Sumo Logic's Summary Agent, an agentic AI tool.
120119

121-
The summary is generated when an insight is created, and is regenerated whenever the insight is modified, keeping it current with added or removed signals. Summaries are not only generated for insights created by the system, but also insights created manually by users via the UI.
122-
123120
<img src={useBaseUrl('img/cse/insight-summary-pane.png')} alt="Insight summary" style={{border: '1px solid gray'}} width="300"/>
124121

125122
:::note
126123
Help us refine the tool by using the thumbs-up or thumbs-down buttons to provide feedback on the effectiveness of the summary presented.
127124
:::
128125

126+
The summary is generated when an insight is created, and is regenerated whenever the insight is modified, keeping it current with added or removed signals. Summaries are not only generated for insights created by the system, but also custom insights created manually by users via the UI.
127+
128+
#### FAQs about the insight summary
129+
130+
* **How does the AI handle data privacy?**
131+
* There is no data sharing across tenants.
132+
* No customer data or personally identifiable information (PII) is used to train models.
133+
* Processing is limited to schemas and sample fields, and is reviewed for compliance.
134+
* The AI is powered by Amazon Bedrock, with rolling expiration for temporary query history.
135+
* **Can insight summaries be accessed by the API?**<br/>Yes. The summaries are included in output when you run the [insight APIs](https://api.sumologic.com/docs/sec/#operation/GetInsight) in the [Cloud SIEM APIs](https://help.sumologic.com/docs/api/cloud-siem-enterprise/).
136+
* **Is there an additional cost?**<br/>No. The insight summary is included as part of Cloud SIEM at no extra licensing fee.
137+
129138
### Signal visualization area
130139

131140
At the top of the insight details page, you’ll see a signal timeline that visualizes the insight’s attached signals, which are the signals that caused the insight to be created, and any signals that have been manually added to the insight.

0 commit comments

Comments
 (0)