Skip to content

Commit 41721fa

Browse files
authored
Merge branch 'main' into postgresqlST
2 parents 70aa3c8 + 08d0ea9 commit 41721fa

32 files changed

+477
-220
lines changed

blog-cse/2025-01-31-content.md

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
---
2+
title: January 31, 2025 - Content Release
3+
image: https://help.sumologic.com/img/sumo-square.png
4+
keywords:
5+
- log mappers
6+
- parsers
7+
hide_table_of_contents: true
8+
---
9+
10+
import useBaseUrl from '@docusaurus/useBaseUrl';
11+
12+
<a href="https://help.sumologic.com/release-notes-cse/rss.xml"><img src={useBaseUrl('img/release-notes/rss-orange2.png')} alt="icon" width="50"/></a>
13+
14+
This content release includes:
15+
- Removal and updates to Cloud SIEM rules.
16+
- Parsing and mapping support for new products.
17+
- Updates to existing parsing and mappers to support additional events and field mappings.
18+
19+
Changes are enumerated below.
20+
21+
### Rules
22+
- [Deleted] MATCH-S00604 OneLogin - API Credentials - Key Used from Untrusted Location
23+
- [Updated] FIRST-S00044 First Seen AppID Generating MailItemsAccessed Event from User
24+
- Corrected typo in "MailItemsAccessed".
25+
- [Updated] FIRST-S00046 First Seen Client Generating MailItemsAccessed Event from User
26+
- Corrected typo in "MailItemsAccessed".
27+
28+
### Log Mappers
29+
- [New] Crowdstrike FileVantage Catch All
30+
- [New] Dragos Communication
31+
- [New] Dragos Indicator
32+
- [New] Dragos System|Asset
33+
- [New] Extrahop JSON Catch All
34+
- [New] F5 TMM Http Request|TMM Network|TMM Connection error
35+
- [New] F5 TMSH - Custom Parser
36+
- [New] Zendesk - Login events
37+
#### Updated Field Mappings
38+
- [Updated] Code42 Incydr Alerts C2C
39+
- [Updated] Cyber Ark EPM AggregateEvent
40+
- [Updated] Google G Suite - meet
41+
- [Updated] Palo Alto GlobalProtect - Custom Parser
42+
- [Updated] Palo Alto GlobalProtect Auth - Custom Parser
43+
- [Updated] Zendesk Catch All
44+
45+
### Parsers
46+
- [New] /Parsers/System/CrowdStrike/CrowdStrike Filevantage
47+
- [New] /Parsers/System/Extrahop/Extrahop JSON
48+
#### Updated parsers to handle additional events and field parsing
49+
- [Updated] /Parsers/System/Code42/Code42 Incydr
50+
- [Updated] /Parsers/System/Dragos/Dragos
51+
- [Updated] /Parsers/System/F5/F5 Syslog
52+
- [Updated] /Parsers/System/Microsoft/Microsoft Azure JSON
53+
- [Updated] /Parsers/System/Microsoft/Office 365
54+
- [Updated] /Parsers/System/Palo Alto/PAN Firewall CSV

blog-service/2025-01-31-apps.md

Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
---
2+
title: Apps, Solutions, and Collection Integrations - January Release
3+
image: https://help.sumologic.com/img/sumo-square.png
4+
keywords:
5+
- apps
6+
- january-release
7+
hide_table_of_contents: true
8+
---
9+
10+
import useBaseUrl from '@docusaurus/useBaseUrl';
11+
12+
<a href="https://help.sumologic.com/release-notes-service/rss.xml"><img src={useBaseUrl('img/release-notes/rss-orange2.png')} alt="icon" width="50"/></a>
13+
14+
### New release
15+
16+
We’re excited to announce the release of the new Azure Virtual Network app and 11 new OpenTelemetry Remote Management source templates for Sumo Logic.
17+
18+
- **Azure Virtual Network**. Azure Virtual Network is a service that provides the fundamental building block for your private network in Azure, enabling many types of Azure resources to securely communicate with one other, using the internet, and on-premises networks. This integration helps in monitoring the outgoing and incoming traffic flows, dropped packets, bandwidth consumption, verifying network isolation, and compliance. [Learn more](/docs/integrations/microsoft-azure/azure-virtual-network/).
19+
- **OpenTelemetry Remote Management**. Released [Apache](/docs/send-data/opentelemetry-collector/remote-management/source-templates/apache/), [Docker](/docs/send-data/opentelemetry-collector/remote-management/source-templates/docker/), [Kafka](/docs/send-data/opentelemetry-collector/remote-management/source-templates/kafka/), [Linux](/docs/send-data/opentelemetry-collector/remote-management/source-templates/linux/), [Local File](/docs/send-data/opentelemetry-collector/remote-management/source-templates/localfile/), [Mac](/docs/send-data/opentelemetry-collector/remote-management/source-templates/mac/), [Nginx](/docs/send-data/opentelemetry-collector/remote-management/source-templates/nginx/), [RabbitMQ](/docs/send-data/opentelemetry-collector/remote-management/source-templates/rabbitmq/), [Redis](/docs/send-data/opentelemetry-collector/remote-management/source-templates/redis/), [Syslog](/docs/send-data/opentelemetry-collector/remote-management/source-templates/syslog/), and [Windows](/docs/send-data/opentelemetry-collector/remote-management/source-templates/windows/) OpenTelemetry Remote Management source templates.
20+
21+
### AWS Observability v2.11.0
22+
23+
This section details the new features and updates in AWS Observability for upgrading your Terraform script or CloudFormation template to version v2.11.0.
24+
25+
- **New Features**:
26+
- **Amazon RDS app**. Added support to analyze and monitor RDS Oracle CloudWatch and CloudTrail logs.
27+
- **Amazon Load Balancer apps**. Added support to analyze and monitor Cloudtrail audit event logs for Application Load Balancer, Classic Load Balancer, and Network Load Balancer.
28+
- Added out-of-the-box monitors for RDS Oracle DB, Application Load Balancer, Classic Load Balancer, and Network Load Balancer. Solution now supports 78 out-of-box monitors.
29+
- Added support to collect custom metrics namespaces.
30+
- Added support to subscribe cloudWatch log groups based on AWS tags to Sumo Logic.
31+
- Added support to filter AWS CloudWatch metrics based on AWS tags.
32+
- **Updates**:
33+
- Updated cloudformation helper function with Lambda Runtime to python v3.13.
34+
- Updated SAM Lambda runtime to python v3.13 with latest library updates.
35+
- Updated Telemetry Lambda Runtime to python v3.13 with latest library updates.
36+
37+
To learn more, refer the [AWS Observability changelog](/docs/observability/aws/deploy-use-aws-observability/changelog/#v2110-24-jan-2025).
38+
39+
### Enhancements
40+
41+
- **Added Monitors in OpenTelemetry apps**. [Jira - App Development](/docs/integrations/app-development/opentelemetry/jira-opentelemetry/#jira-alerts), [Linux - Cloud Security and Monitoring Analytics](/docs/integrations/cloud-security-monitoring-analytics/opentelemetry/linux-opentelemetry/#linux---cloud-security-monitoring-and-analytics-alerts), [PCI Compliance for Linux](/docs/integrations/pci-compliance/opentelemetry/linux-opentelemetry/#pci-compliance-for-linux-alerts), [PCI Compliance For Windows JSON](/docs/integrations/pci-compliance/opentelemetry/windows-json-opentelemetry/#pci-compliance-for-windows-json-alerts), [Puppet - App Development](/docs/integrations/app-development/opentelemetry/puppet-opentelemetry/#puppet-alerts), and [Windows - Cloud Security Monitoring and Analytics](/docs/integrations/cloud-security-monitoring-analytics/opentelemetry/windows-opentelemetry/#windows---cloud-security-monitoring-and-analytics-alerts) apps are updated with new monitors.
42+
- **Integrated Cloud-to-Cloud source creation and app installation**. [Armis](/docs/integrations/saas-cloud/armis/#collection-configuration-and-app-installation), [Asana](/docs/integrations/saas-cloud/asana/#collection-configuration-and-app-installation), [Digital Guardian ARC](/docs/integrations/saas-cloud/digital-guardian-arc/#collection-configuration-and-app-installation), [DocuSign](/docs/integrations/saas-cloud/docusign/#collection-configuration-and-app-installation), [Dropbox](/docs/integrations/saas-cloud/dropbox/#collection-configuration-and-app-installation), [Druva](/docs/integrations/saas-cloud/druva/#collection-configuration-and-app-installation), [Druva Cyber Resilience](/docs/integrations/saas-cloud/druva-cyber-resilience/#collection-configuration-and-app-installation), [Gmail Trace Logs](/docs/integrations/saas-cloud/gmail-tracelogs/#collection-configuration-and-app-installation), [Microsoft Exchange Trace Logs](/docs/integrations/saas-cloud/microsoft-exchange-trace-logs/#collection-configuration-and-app-installation), [Microsoft Graph Identity Protection](/docs/integrations/microsoft-azure/microsoft-graph-identity-protection/#collection-configuration-and-app-installation), [Miro](/docs/integrations/saas-cloud/miro/#collection-configuration-and-app-installation), [SailPoint](/docs/integrations/security-threat-detection/sailpoint/#collection-configuration-and-app-installation), and [Zendesk](/docs/integrations/saas-cloud/zendesk/#collection-configuration-and-app-installation) apps are now updated to have integrated Cloud-to-Cloud source creation and app installation.
43+
- **Classic Apps to Next-Gen Apps Migration.** [CIS AWS Foundations Benchmark](/docs/integrations/amazon-aws/cis-aws-foundations-benchmark), [Gmail Trace Logs](/docs/integrations/saas-cloud/gmail-tracelogs), and [Microsoft Exchange Trace Logs](/docs/integrations/saas-cloud/microsoft-exchange-trace-logs) apps are migrated from [Classic Apps (Legacy)](/docs/get-started/apps-integrations/#classic-apps-legacy) to [Next-Gen Apps](/docs/get-started/apps-integrations/#next-gen-apps).
44+
- We have enhanced the following six Cloudtrail Logs based apps:
45+
- [Amazon CloudTrail - Cloud Security Monitoring and Analytics](/docs/integrations/cloud-security-monitoring-analytics/aws-cloudtrail)
46+
- [AWS CloudTrail](/docs/integrations/amazon-aws/cloudtrail)
47+
- [CIS AWS Foundations Benchmark](/docs/integrations/amazon-aws/cis-aws-foundations-benchmark)
48+
- [Cloud Infrastructure Security for AWS](/docs/security/additional-security-features/cloud-infrastructure-security/cloud-infrastructure-security-for-aws)
49+
- [PCI Compliance For AWS CloudTrail](/docs/integrations/amazon-aws/cloudtrail-pci-compliance)
50+
- [Threat Intel for AWS](/docs/integrations/amazon-aws/threat-intel)
51+
- **Sumo Logic Kickstart Data**. Updated the default time range of all the panels to six hours and added text panels in the dashboards.
52+
- **AWS Serverless Application Models**. Added support for Sumo Logic Korea deployment by releasing the following SAM:
53+
- [sumologic-aws-cloudtrail-benchmark](https://github.com/SumoLogic/sumologic-aws-lambda/tree/main/cloudtrailbenchmark) - Semantic v1.0.19
54+
55+
### Bug Fixes
56+
57+
- **Kubernetes Control Plane**. Added the `quantization_interval` filter variable.

blog-service/2025-02-01-apps.md

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
---
2+
title: JumpCloud Directory Insights (Apps)
3+
image: https://help.sumologic.com/img/sumo-square.png
4+
keywords:
5+
- apps
6+
- jumpcloud-directory-insights
7+
hide_table_of_contents: true
8+
---
9+
10+
import useBaseUrl from '@docusaurus/useBaseUrl';
11+
12+
<a href="https://help.sumologic.com/release-notes-service/rss.xml"><img src={useBaseUrl('img/release-notes/rss-orange2.png')} alt="icon" width="50"/></a>
13+
14+
We're excited to introduce the new JumpCloud Directory Insights app for Sumo Logic. This app provides a comprehensive visibility into authentication events, user activities, and security-related actions within your JumpCloud-managed environment. The pre-configured dashboards can help you to track failed login attempts, privileged access changes, and account lockouts in real-time to improve security and ensure organizational policy compliance. [Learn more](/docs/integrations/saas-cloud/jumpcloud-directory-insights/).

cid-redirects.json

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -722,7 +722,7 @@
722722
"/07Sumo-Logic-Apps/01Amazon_and_AWS/AWS_Elastic_Load_Balancing_Metrics": "/docs/integrations/amazon-aws/application-load-balancer",
723723
"/07Sumo-Logic-Apps/01Amazon_and_AWS/AWS_Elastic_Load_Balancing_Metrics/01Collect-Metrics-for-the-AWS-Elastic-Load-Balancing-App": "/docs/integrations/amazon-aws/application-load-balancer",
724724
"/07Sumo-Logic-Apps/01Amazon_and_AWS/AWS_Elastic_Load_Balancing_Metrics/03Amazon-CloudWatch---ELB-Metrics-Dashboards": "/docs/integrations/amazon-aws/application-load-balancer",
725-
"/07Sumo-Logic-Apps/01Amazon_and_AWS/AWS_Elastic_Load_Balancing": "/docs/integrations/amazon-aws/elastic-load-balancing",
725+
"/07Sumo-Logic-Apps/01Amazon_and_AWS/AWS_Elastic_Load_Balancing": "/docs/integrations/amazon-aws/classic-load-balancer",
726726
"/docs/integrations/amazon-aws/elastic-load-balancing-metrics": "/docs/integrations/amazon-aws/application-load-balancer",
727727
"/07Sumo-Logic-Apps/01Amazon_and_AWS/AWS_Elastic_Load_Balancing/01-Collect-logs-for-the-AWS-Elastic-Load-Balancing-App": "/docs/integrations/amazon-aws/application-load-balancer",
728728
"/07Sumo-Logic-Apps/01Amazon_and_AWS/AWS_Elastic_Load_Balancing/AWS-Elastic-Load-Balancing-App-Dashboards": "/docs/integrations/amazon-aws/classic-load-balancer",
@@ -1584,6 +1584,7 @@
15841584
"/cid/10188": "/docs/integrations/saas-cloud/miro",
15851585
"/cid/10187": "/docs/integrations/saas-cloud/digital-guardian-arc",
15861586
"/cid/10114": "/docs/integrations/saas-cloud/jamf",
1587+
"/cid/10115": "/docs/integrations/saas-cloud/jumpcloud-directory-insights",
15871588
"/cid/10208": "/docs/integrations/saas-cloud/cisco-meraki-c2c",
15881589
"/cid/10209": "/docs/integrations/security-threat-detection/cisco-meraki",
15891590
"/cid/10210": "/docs/integrations/saas-cloud/proofpoint-tap",
@@ -2464,7 +2465,7 @@
24642465
"/cid/5375": "/",
24652466
"/cid/5377": "/docs/search/behavior-insights/logreduce/understand-the-logreduce-relevance-column",
24662467
"/cid/5378": "/docs/cse/ingestion/ingestion-sources-for-cloud-siem/aws-cloudtrail",
2467-
"/cid/5379": "/docs/integrations/amazon-aws/elastic-load-balancing",
2468+
"/cid/5379": "/docs/integrations/amazon-aws/classic-load-balancer",
24682469
"/cid/5380": "/docs/cse/ingestion/ingestion-sources-for-cloud-siem/aws-cloudtrail",
24692470
"/cid/5381": "/docs/integrations/containers-orchestration/vmware-legacy",
24702471
"/cid/5382": "/docs/integrations/pci-compliance",
@@ -4255,5 +4256,6 @@
42554256
"/docs/search/logreduce/influence-the-logreduce-outcome": "/docs/search/behavior-insights/logreduce/influence-the-logreduce-outcome",
42564257
"/docs/search/logreduce/understand-the-logreduce-relevance-column": "/docs/search/behavior-insights/logreduce/understand-the-logreduce-relevance-column",
42574258
"/docs/search/behavior-insights/logreduce-values": "/docs/search/behavior-insights/logreduce/logreduce-values",
4258-
"/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/azure-event-hubs-cloud-to-cloud-source-migration":"/docs/send-data/collect-from-other-data-sources/azure-monitoring/azure-event-hubs-source-migration"
4259+
"/docs/send-data/hosted-collectors/cloud-to-cloud-integration-framework/azure-event-hubs-cloud-to-cloud-source-migration":"/docs/send-data/collect-from-other-data-sources/azure-monitoring/azure-event-hubs-source-migration",
4260+
"/docs/integrations/amazon-aws/elastic-load-balancing":"/docs/integrations/amazon-aws/classic-load-balancer"
42594261
}

docs/dashboards/about.md

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -101,3 +101,20 @@ Dashboards have two themes available: Light mode (which is the default) and Dar
101101
## Clickable Legend
102102

103103
If you want to focus on one item in your chart you can simply click on the item in the legend. If you want to toggle just one legend item, just hold the **shift** key and then click the item.<br/><img src={useBaseUrl('/img/dashboards/about-dashboard/clicklegend.gif')} alt="clicklegend" style={{border: '1px solid gray'}} width="700" />
104+
105+
## Dashboard Information
106+
107+
The dashboard information popup provides insights into the scan costs associated with log-based queries that run within dashboards.
108+
109+
To view the dashboard information, follow the steps below:
110+
1. Open the dashboard for which you need to view the information.
111+
2. Click the three-dot kebab menu icon in the top right corner of the dashboard and select **Info** from the dropdown menu.<br/><img src={useBaseUrl('img/dashboards/dashboard_info/dashboard_info.png')} alt="dashboard_info" style={{border: '1px solid gray'}} width="230"/>
112+
3. A popup pane will appear, displaying the following dashboard information:<br/><img src={useBaseUrl('img/dashboards/dashboard_info/dashboard_info_panel.png')} alt="dashboard_info_panel" style={{border: '1px solid gray'}} width="600"/>
113+
- **Dashboard Name**. Name of the dashboard.
114+
- **Created By**. The user who created the dashboard.
115+
- **Time Range Expression**. The time range selected for the dashboard.
116+
- **Start**. The current start time based on the selected time range.
117+
- **End**. The current end time based on the selected time range.
118+
- **Time Zone**. The time zone for the set time range.
119+
- **Scanned Bytes**. The total amount of data scanned in bytes.
120+
- **Dashboard ID**. A unique identification ID for the dashboard. Copy and use the dashboard ID within the APIs to identify the dashboard when making requests.

docs/get-started/quickstart.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -25,9 +25,14 @@ What you'll learn:
2525

2626
You'll need a Sumo Logic account. Sign up for a free trial [here](/docs/get-started/sign-up).
2727

28-
## Getting started with kickstart data in your trial
28+
## Getting started with Kickstart Data in your trial
2929

30-
With your [trial](/docs/get-started/sign-up), you can access preloaded placeholder Kickstart Data to explore Sumo Logic instantly without setting up your own data. This feature helps trial users see immediate value and bypass setup barriers like firewall and security configurations.
30+
With your [Sumo Logic trial](/docs/get-started/sign-up), you can access preloaded placeholder Kickstart Data to explore Sumo Logic instantly prior to setting up your own data. This feature helps trial users see immediate value and bypass setup barriers like firewall and security configurations.
31+
32+
:::warning limitations
33+
* Your trial workflow—Kickstart Data or custom data—is automatically determined by marketing-based user profiling. Manual selection of a workflow is not currently supported.
34+
* This feature is only available to select trial users during the initial rollout phase.
35+
:::
3136

3237
### Key benefits
3338

@@ -50,11 +55,6 @@ With your [trial](/docs/get-started/sign-up), you can access preloaded placehold
5055

5156
You can skip Kickstart Data anytime and begin ingesting your own data.
5257

53-
:::warning limitations
54-
* User profiling for selection. Your assignment to either placeholder data or your own data workflow is determined by user profiling data from marketing. You won't be able to manually select your preferred workflow.
55-
* Limited availability. At launch, the placeholder data option will only be available to select trial users based on profiling.
56-
:::
57-
5858
## Step 1: Get your data into Sumo
5959

6060
The journey of 10,000 logs begins with a single collector. Your data analytics journey starts by sending your data to Sumo.

0 commit comments

Comments
 (0)