Skip to content

Commit 8966716

Browse files
authored
DOCS-1209 - Replace old image tagging with new tagging - Manage and alerts (#6001)
* Images in manage * Fix spelling error * Start alerts * Finish alerts * Fix spelling error
1 parent 79dd7a7 commit 8966716

39 files changed

+137
-151
lines changed

docs/alerts/monitors/alert-response-faq.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,8 @@ title: Alert Response FAQ
44
description: Our commonly asked questions about alert response are documented for your reference.
55
---
66

7+
import useBaseUrl from '@docusaurus/useBaseUrl';
8+
79
## Is alert response available in all Sumo Logic packages? 
810

911
Overall, yes. Alert response is available in all the Sumo Logic packages. However, there are specific features within alert response that only work on specific packages. See the table below for details. 
@@ -41,7 +43,7 @@ For example, in Slack, you can add the following section to the **Alert Payload*
4143
},
4244
```
4345

44-
![alertResponseURLExample.png](/img/alerts/monitors/alertResponseURLExample.png)
46+
<img src={useBaseUrl('img/alerts/monitors/alertResponseURLExample.png')} alt="Alert response URL example" style={{border: '1px solid gray'}} width="800" />
4547

4648
Learn more about [Alert Variables](/docs/alerts/monitors/alert-variables).
4749

docs/alerts/monitors/alert-response.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ Learn how to use alert response.
3737

3838
## Setting up alert response
3939

40-
Email alerts automatically get a button labeled **View Alert** that opens the alert on the alert page, shown in the below image.<br/> ![view alert from email.png](/img/alerts/monitors/view-alert-from-email.png)
40+
Email alerts automatically get a button labeled **View Alert** that opens the alert on the alert page, shown in the below image.<br/><img src={useBaseUrl('img/alerts/monitors/view-alert-from-email.png')} alt="View alert from email" style={{border: '1px solid gray'}} width="800" />
4141

4242
If you use [Webhook connections](/docs/alerts/webhook-connections) offered by Sumo Logic for receiving notifications, you'll need to provide the [`alertResponseUrl` variable](/docs/alerts/monitors/alert-variables) in your notification payload of a monitor to receive a link that opens alert response. When your monitor is triggered, it will generate a URL and provide it in the alert notification payload, which you can use to open the alert response.
4343

@@ -72,7 +72,7 @@ To get to your Alert List:
7272
* From the [**New UI**](/docs/get-started/sumo-logic-ui/), select **Alerts**.
7373
* From the [**Classic UI**](/docs/get-started/sumo-logic-ui-classic), click the bell icon in the top menu.
7474

75-
To search alerts, use the search bar and filters.<br/>![search alert list.png](/img/alerts/monitors/search-alert-list.png)
75+
To search alerts, use the search bar and filters.<br/><img src={useBaseUrl('img/alerts/monitors/search-alert-list.png')} alt="Search alert list" style={{border: '1px solid gray'}} width="800" />
7676

7777
To sort by category (for example, **Name**, **Severity**, **Status**), click on a column header.
7878

@@ -115,7 +115,7 @@ To view detailed information about an alert, go to your [Alert List](#alert-list
115115
* A history of previous occurrences of the alert.
116116
* Key details such as the trigger time and the condition that caused the alert.
117117

118-
The following images and lists describe alert element on the page.<br/>![top of the alert response page.png](/img/alerts/monitors/top-alert-response-page.png)
118+
The following images and lists describe alert element on the page.<br/><img src={useBaseUrl('img/alerts/monitors/top-alert-response-page.png')} alt="Top of the alert response page" style={{border: '1px solid gray'}} width="800" />
119119

120120
* **A**. Monitor name.
121121
* **B**. Copies the link to the opened alert page.
@@ -130,11 +130,11 @@ The following images and lists describe alert element on the page.<br/>![top of
130130
:::note
131131
Sumo Logic automatically resolves alerts when the monitor's recovery condition is met. This behavior cannot be modified or disabled. While you could configure a recovery condition that prevents Sumo Logic from resolving a monitor, this is not recommended, as it may suppress unrelated alerts from being triggered.
132132
:::
133-
![alert page sep 23.png](/img/alerts/monitors/alert-page.png)
133+
<img src={useBaseUrl('img/alerts/monitors/alert-page.png')} alt="Resolves the alert" style={{border: '1px solid gray'}} width="800" />
134134
* **K**. The red exclamation mark indicates the alert is still active and a white exclamation in the gray circle indicates it's resolved. <br/> <img src={useBaseUrl('img/alerts/monitors/k-label.png')} alt="labels" width="300"/>
135135
* **Related Alerts**. A panel with related alerts and the monitor History. It shows other alerts in the system that were triggered around the same time as this alert. This information is helpful to know what issues are happening in the system and whether the current problem is an isolated issue or a more systemic one. There are two types of relations that a related alert can have.<br/> <img src={useBaseUrl('img/alerts/monitors/related-alerts.png')} alt="related alerts" width="200"/>
136136
* **Time**. Shows all the alerts that were triggered 30 minutes before or after the given alert that doesn't have another association.
137-
* **Entity**. Shows all the alerts that were triggered one hour before and after the given alert that happened on the same entity (node, pod, cluster, etc.). You can click the expand arrow ![expand arrow.png](/img/alerts/monitors/expand-arrow.png) to view the alert's trigger condition and the white arrow in the square ![open in new tab icon.png](/img/alerts/monitors/open-new-tab.png) to open the alert in its own alert page.
137+
* **Entity**. Shows all the alerts that were triggered one hour before and after the given alert that happened on the same entity (node, pod, cluster, etc.). You can click the expand arrow <img src={useBaseUrl('img/alerts/monitors/expand-arrow.png')} alt="Expand arrow" width="30" /> to view the alert's trigger condition and the white arrow in the square <img src={useBaseUrl('img/alerts/monitors/open-new-tab.png')} alt="Open in new tab icon" width="30" /> to open the alert in its own alert page.
138138
* **Monitor History**. Shows the past 30 days of similar alerts that were triggered by the monitor (that generated the current alert). Monitor History can be helpful to determine how frequently an alert has fired in the past and if the alert is flaky. You can then quickly correlate whether the current problem is similar to a past one by comparing the information shared for the alert.
139139
* **L**. The query of the monitor.<br/><img src={useBaseUrl('img/alerts/monitors/l-m-n-labels.png')} alt="labels" width="800"/>
140140
* **M**. A chart that visualizes the trend of the metric that was tracked as part of the alert condition of the monitor. The visualization tracks the *before* and *during* trends of the metric.
@@ -191,7 +191,7 @@ The **Log Fluctuations** context card, available for logs monitors, detects diff
191191

192192
This card detects time series anomalies for entities related to the alert.
193193

194-
Anomalies are grouped into [golden signals](https://sre.google/sre-book/monitoring-distributed-systems/). Anomalies are also presented on a timeline; the length of the anomaly represents its duration. <br/> ![anomalies .png](/img/alerts/monitors/anomalies.png)
194+
Anomalies are grouped into [golden signals](https://sre.google/sre-book/monitoring-distributed-systems/). Anomalies are also presented on a timeline; the length of the anomaly represents its duration. <br/><img src={useBaseUrl('img/alerts/monitors/anomalies.png')} alt="Anomalies" style={{border: '1px solid gray'}} width="800" />
195195

196196
* **A**. Name and description of the context card.
197197
* **B**. Count of anomalies belonging to each golden signal type.
@@ -202,15 +202,15 @@ Anomalies are grouped into [golden signals](https://sre.google/sre-book/monitor
202202
Only anomalies with a start time around 30 minutes before or after the alert was created show up in the card.
203203
:::
204204

205-
Hover over an EOI to view key information about the event.<br/> ![eoi-stats.png](/img/alerts/monitors/eoi-stats.png)
205+
Hover over an EOI to view key information about the event.<br/><img src={useBaseUrl('img/alerts/monitors/eoi-stats.png')} alt="EOI stats" style={{border: '1px solid gray'}} width="300" />
206206

207-
Click on the EOI to open the **Summary View** and **Entity Inspector**.<br/> ![entity inspector.png](/img/alerts/monitors/entity-inspector.png)
207+
Click on the EOI to open the **Summary View** and **Entity Inspector**.<br/><img src={useBaseUrl('img/alerts/monitors/entity-inspector.png')} alt="Entity inspector" style={{border: '1px solid gray'}} width="400" />
208208

209209
### Benchmark
210210

211211
Benchmarks refer to baselines computed from anonymized and aggregated telemetry data from Sumo Logic customers in domains such as AWS. If the telemetry values for your entity during an alert period are unusual compared to benchmarks, you may have an unusual configuration change or other backend issues. 
212212

213-
For example, the card below shows that `ServiceUnavailable` error is happening 32 times more often in your AWS account compared with other Sumo Logic customer’s accounts. This AWS error pertains to AWS API calls that are failing at a higher rate than what is expected based on cross-customer baselines. This particular error implies an AWS incident affecting the particular AWS resource type and API. <br/> ![benchmark card.png](/img/alerts/monitors/benchmark.png)
213+
For example, the card below shows that `ServiceUnavailable` error is happening 32 times more often in your AWS account compared with other Sumo Logic customer’s accounts. This AWS error pertains to AWS API calls that are failing at a higher rate than what is expected based on cross-customer baselines. This particular error implies an AWS incident affecting the particular AWS resource type and API. <br/><img src={useBaseUrl('img/alerts/monitors/benchmark.png')} alt="Benchmark card" style={{border: '1px solid gray'}} width="800" />
214214

215215
* **A**. Name and description of the context card.
216216
* **B**. Count of unusual Benchmarks by golden signal type.

docs/alerts/monitors/create-monitor.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -318,7 +318,7 @@ For example, when an alert is set to `greater than 10`, the recovery would be
318318
| `<threshold type>` | How you want the value compared. Select greater than, greater than or equal, less than or equal, or less than. |
319319
| `<threshold>` | The value against which the resolution will be evaluated. You can specify any valid numeric value. |
320320

321-
The Alert and recovery setting affects both the alert generation logic and the alert recovery logic. `Alert and recovery require a minimum of <count> data points for "at all times" evaluation windows`. This setting only works when you choose `at all times within` as the type of occurrence for the alert. <br/>![metrics alert datapoints.png](/img/alerts/monitors/minimum-datapoints.png)
321+
The Alert and recovery setting affects both the alert generation logic and the alert recovery logic. `Alert and recovery require a minimum of <count> data points for "at all times" evaluation windows`. This setting only works when you choose `at all times within` as the type of occurrence for the alert. <br/><img src={useBaseUrl('img/alerts/monitors/minimum-datapoints.png')} alt="Metrics alert datapoints" style={{border: '1px solid gray'}} width="800" />
322322

323323
| Parameter | Description |
324324
|:--|:--|

docs/alerts/monitors/monitor-faq.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@ title: Monitors FAQ
44
description: Frequently asked questions about Sumo Logic monitors.
55
---
66

7+
import useBaseUrl from '@docusaurus/useBaseUrl';
78
import AlertsTimeslice from '../../reuse/alerts-timeslice.md';
89

910
## How can I optimize scan costs for monitors when using Flex Pricing?
@@ -85,9 +86,9 @@ The [Test Connection feature for webhooks](/docs/alerts/webhook-connections/se
8586

8687
## One of our monitors suddenly stopped sending notifications, even though I see it on the monitors page
8788

88-
One reason could be that the user who created the monitor was deleted. You can check the **Created By** value on the monitors page. If it has `<User Unknown>`, you will need to re-create the monitor. <br/>![user unknown monitors.png](/img/alerts/monitors/user-unknown-monitors.png)
89+
One reason could be that the user who created the monitor was deleted. You can check the **Created By** value on the monitors page. If it has `<User Unknown>`, you will need to re-create the monitor. <br/><img src={useBaseUrl('img/alerts/monitors/user-unknown-monitors.png')} alt="User unknown monitors" style={{border: '1px solid gray'}} width="200" />
8990

90-
You can quickly **Duplicate** the monitor by hovering over it on the monitors page and clicking the three-dot kebab icon:<br/>![more actions menu for monitors.png](/img/alerts/monitors/more-actions-menu-for-monitors.png)
91+
You can quickly **Duplicate** the monitor by hovering over it on the monitors page and clicking the three-dot kebab icon:<br/><img src={useBaseUrl('img/alerts/monitors/more-actions-menu-for-monitors.png')} alt="More actions menu for monitors" style={{border: '1px solid gray'}} width="300" />
9192

9293
then selecting **Duplicate**. If your monitor still doesn't work, we recommend contacting [Sumo Logic support](https://support.sumologic.com/)
9394

docs/alerts/scheduled-searches/create-email-alert.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -74,8 +74,6 @@ Do either of the following:
7474
* To make changes to the search query before you run it again, click the saved search title link, next to **Saved Search**. This will open the query in the Sumo Logic search page. 
7575
* To see all the results of the search, under **Message Distribution**, click the **View results in Sumo Logic** link in the email. Or under **Aggregation**, click "**here**". Sumo Logic will recreate the search exactly matching the query and time parameters of the original scheduled search.
7676

77-
![Search from email](/img/alerts/search_from_email_new.png)
78-
7977
:::note
8078
If you're a new user and someone has forwarded you an alert email, the links to the search will not work until you've completed your setup process.
8179
:::
@@ -104,7 +102,7 @@ The Scheduled Search Email Alert template includes the following details:
104102
* **Aggregation.** Displays the first 25 messages of the search results, and includes the complete number of results. Click "**here**" in the email to view the full results in Sumo Logic. 
105103
* **Results as CSV attachment.** If you have selected to receive your scheduled search results as a CSV file, it will be attached to the email. The maximum CSV file size allowed is 5MB or 1,000 results. 
106104

107-
![Search from email](/img/alerts/search_from_email_new.png)
105+
<img src={useBaseUrl('img/alerts/search_from_email_new.png')} alt="Search from email" style={{border: '1px solid gray'}} width="800" />
108106

109107
:::note
110108
Rarely, there may be circumstances that prevent the histogram from loading fast enough to be included with the email before it is sent. In that case, you will receive an email with all pertinent information, just without the graph.

docs/alerts/scheduled-searches/edit-cancel.md

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,8 @@ sidebar_label: Edit or Cancel a Scheduled Search
55
description: You can edit or cancel a Scheduled Search at any time.
66
---
77

8+
import useBaseUrl from '@docusaurus/useBaseUrl';
9+
810
You can edit or cancel a Scheduled Search at any time from your [Library](/docs/get-started/library). If you cancel a scheduled search, it will revert to a saved search.
911

1012
:::important
@@ -14,8 +16,8 @@ If the user who "owns" a Scheduled Search is removed from your org, the Schedule
1416
## Cancel a Scheduled Search
1517

1618
1. Go to your **Library** and find the scheduled search you want to cancel. For information about finding an item in the Library, see [Search the Library](/docs/get-started/library#search-the-library)
17-
1. Click the more options menu to the right of the scheduled search and select **Edit**. <br/>![Library scheduled search edit](/img/alerts/list-of-sched-searches.png)
18-
1. In the **Edit Search** dialog, click **Edit this search's schedule**.<br/>![edit search](/img/alerts/edit-search.png)
19+
1. Click the more options menu to the right of the scheduled search and select **Edit**. <br/><img src={useBaseUrl('img/alerts/list-of-sched-searches.png')} alt="Library scheduled search edit" style={{border: '1px solid gray'}} width="800" />
20+
1. In the **Edit Search** dialog, click **Edit this search's schedule**.<br/><img src={useBaseUrl('img/alerts/edit-search.png')} alt="Edit search" style={{border: '1px solid gray'}} width="500" />
1921
1. From the **Run Frequency** menu, choose **Never** to cancel the scheduled search.
2022
1. Click **Update**.
2123

@@ -48,4 +50,4 @@ You have two options to resolve the issue:
4850
If you don’t have the **Change Data Access Level** capability, your Sumo Logic administrator will need to update your role to include it.
4951
:::
5052

51-
![edit search](/img/alerts/cannot-edit-scheduled-search.png)
53+
<img src={useBaseUrl('img/alerts/cannot-edit-scheduled-search.png')} alt="Edit search" style={{border: '1px solid gray'}} width="400" />

docs/alerts/scheduled-searches/faq.md

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,8 @@ sidebar_label: FAQ
55
description: You can edit or cancel a Scheduled Search at any time.
66
---
77

8+
import useBaseUrl from '@docusaurus/useBaseUrl';
9+
810
The following topics include frequently asked questions about scheduled
911
searches and provide troubleshooting tips. 
1012

@@ -51,7 +53,7 @@ To create a Scheduled Search:
5153
| fields collector, gbytes, collector_pct_of_todaysvolume, todays_volume, plan_size, todaysvolume_against_plan
5254
```
5355
1. For the search **Time Range**, select **Today**.
54-
1. Click **Save As**. <br/>![DataUsageBreached.png](/img/alerts/DataUsageBreached.png)
56+
1. Click **Save As**. <br/><img src={useBaseUrl('img/alerts/DataUsageBreached.png')} alt="Data usage breached" style={{border: '1px solid gray'}} width="500" />
5557
1. In the **Save Search As** dialog, enter a name for this Scheduled Search, such as **90% Data Usage Limit Reached**.
5658
1. Set the **Run frequency** to **Every 4 hours**.
5759
1. Click **Schedule this search**. 
@@ -160,21 +162,21 @@ A maximum of 6000 Scheduled Searches are allowed per account.
160162
161163
The following is an example of a temporary suspension email:
162164
163-
![suspension email.png](/img/alerts/suspension-email.png)
165+
<img src={useBaseUrl('img/alerts/suspension-email.png')} alt="Suspension email" style={{border: '1px solid gray'}} width="700" />
164166
165167
The [Audit Index](/docs/manage/security/audit-indexes/audit-index) stores events on your scheduled search events. The following is an example of a temporary suspension log:
166168
167-
![temp sus.png](/img/alerts/temp-sus.png)
169+
<img src={useBaseUrl('img/alerts/temp-sus.png')} alt="Temporary suspension" style={{border: '1px solid gray'}} width="800" />
168170
169171
#### Permanent suspension
170172
171173
The following is an example of a permanent suspension email:
172174
173-
![permanent sus.png](/img/alerts/permanentsus.png)
175+
<img src={useBaseUrl('img/alerts/permanentsus.png')} alt="Permanent suspension" style={{border: '1px solid gray'}} width="700" />
174176
175177
The [Audit Index](/docs/manage/security/audit-indexes/audit-index) stores events on your scheduled search events. The following is an example of a permanent suspension log:
176178
177-
![perm sus.png](/img/alerts/perm-sus.png)
179+
<img src={useBaseUrl('img/alerts/perm-sus.png')} alt="Permanent suspension" style={{border: '1px solid gray'}} width="800" />
178180
179181
#### How long will the Scheduled Search be suspended?  
180182

docs/alerts/scheduled-searches/save-to-index.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,8 @@ sidebar_label: Save to Index
55
description: When you save the results of a scheduled search to an Index you can search your data using _index=index_name with increased search performance.
66
---
77

8+
import useBaseUrl from '@docusaurus/useBaseUrl';
9+
810
When you create a Scheduled Search, you can save the results to an Index. This way, your data can be searched at a later time using `_index=index_name` with increased search performance.
911

1012
For example, you could use the following query to find successful logins on a Linux system, then save the results to an Index using the **Save to Index** alert type for your Scheduled Search.
@@ -35,7 +37,7 @@ In most cases, if you can use a [Scheduled View](/docs/manage/scheduled-views)
3537
## Save the results of a scheduled search as an Index
3638

3739
1. [Save a search](/docs/search/get-started-with-search/search-basics/save-search)
38-
1. Click **Schedule this search**.<br/>![SaveToIndex.png](/img/alerts/SaveToIndex.png)
40+
1. Click **Schedule this search**.<br/><img src={useBaseUrl('img/alerts/SaveToIndex.png')} alt="Save to index" style={{border: '1px solid gray'}} width="500" />
3941
1. For all configuration options, see [Schedule a Search](schedule-search.md)
4042
1. **Alert Type**. Select **Save to Index**.
4143
1. **Index Name**. Enter a name that you'll use to search the data in a query. Use a name that's descriptive and easy to remember. Names can be comprised of alphanumeric characters; underscores (`_`) are the only special characters allowed.

0 commit comments

Comments
 (0)