Skip to content

Commit 953af6f

Browse files
committed
More configuration tabs
1 parent fe89c01 commit 953af6f

File tree

8 files changed

+15
-14
lines changed

8 files changed

+15
-14
lines changed

docs/cse/administration/manage-custom-insight-resolutions.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -23,13 +23,14 @@ You can define custom *sub-resolutions* for any of the built-in resolutions. Thi
2323
## Create a custom sub-resolution
2424

2525
1. [**Classic UI**](/docs/cse/introduction-to-cloud-siem/#classic-ui). In the top menu select **Configuration**, and then under **Workflow** select **Resolutions**. <br/>[**New UI**](/docs/cse/introduction-to-cloud-siem/#new-ui). In the top menu select **Configuration**, and then under **Cloud SIEM Workflow** select **Insight Resolutions**. You can also click the **Go To...** menu at the top of the screen and select **Insight Resolutions**.
26-
1. On the **Insight Resolutions** page, click **Create**.
27-
1. The **Create Insight Resolution** page appears.
26+
1. On the **Insight Resolutions** tab, click **+ Add Resolution**.
27+
1. The **Add Insight Resolution** popup appears.
2828
1. **Name**. Enter a meaningful name for the new resolution.
2929
1. **Parent Resolution**. Display the dropdown list and select a built-in resolution.
3030
1. **Description**. (Optional) Enter a description that will help other users understand when to use the new resolution.
31-
1. Click **Create**. <br/><img src={useBaseUrl('img/cse/create-insight-resolution.png')} alt="Create Insight resolution dialog" style={{border: '1px solid gray'}} width="400"/>
32-
1. The new resolution appears on the **Insight Resolutions** page, indented below the parent resolution.
31+
1. Click **Save**. <br/><img src={useBaseUrl('img/cse/create-insight-resolution.png')} alt="Create Insight resolution dialog" style={{border: '1px solid gray'}} width="400"/>
32+
33+
The new resolution appears on the **Insight Resolutions** tab, indented below the parent resolution.
3334

3435
## Close an Insight using a custom resolution
3536

docs/cse/administration/manage-custom-insight-statuses.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ This page has information about creating and managing custom Insight statuses.
1414
To view Insight statuses:
1515

1616
1. [**Classic UI**](/docs/cse/introduction-to-cloud-siem/#classic-ui). In the top menu select **Configuration**, and then under **Workflow** select **Statuses**. <br/>[**New UI**](/docs/cse/introduction-to-cloud-siem/#new-ui). In the top menu select **Configuration**, and then under **Cloud SIEM Workflow** select **Insight Statuses**. You can also click the **Go To...** menu at the top of the screen and select **Insight Statuses**.
17-
1. This screenshot of the **Statuses** page shows the three Insight statuses that are preconfigured:
17+
1. This screenshot of the **Insight Statuses** tab shows the three Insight statuses that are preconfigured:
1818
* **New**. Insights that have not been worked on yet.
1919
* **In Progress**. Insights that are being investigated. If you want to create custom statuses to represent different types of "in progress" states, you can click the **Enabled** toggle to disable the default **In Progress** status to reduce confusion.
2020
* **Closed**. Insights whose investigations are complete. <br/><img src={useBaseUrl('img/cse/workflow-page.png')} alt="Statuses page" style={{border: '1px solid gray'}} width="700"/>
@@ -26,28 +26,28 @@ Preconfigured Insight statuses cannot be edited or deleted. You can however crea
2626
To create a custom Insight status:
2727

2828
1. [**Classic UI**](/docs/cse/introduction-to-cloud-siem/#classic-ui). In the top menu select **Configuration**, and then under **Workflow** select **Statuses**. <br/>[**New UI**](/docs/cse/introduction-to-cloud-siem/#new-ui). In the top menu select **Configuration**, and then under **Cloud SIEM Workflow** select **Insight Statuses**. You can also click the **Go To...** menu at the top of the screen and select **Insight Statuses**.
29-
1. On the **Statuses** page, click **Create Status**.
30-
1. On the **New Status** popup, enter a name and description for the status.
29+
1. On the **Insight Statuses** tab, click **+ Add Status**.
30+
1. On the **Add Insight Status** popup, enter a name and description for the status.
3131
1. Click **Color** to select a color for the status. The color will appear on the status on the [Heads Up Display](/docs/cse/get-started-with-cloud-siem/cse-heads-up-display).
3232

3333
## Change the order of Insight statuses
3434

35-
You can change the status of an Insight on the **Details** pane of the page for the Insight. Note that the items in the **Status** dropdown appear in the same order as they do on the **Statuses** page.
35+
You can change the status of an Insight on the **Details** pane of the page for the Insight. Note that the items in the **Status** dropdown appear in the same order as they do on the **Insight Statuses** tab.
3636

3737
<img src={useBaseUrl('img/cse/status-dropdown.png')} alt="Status dropdown" style={{border: '1px solid gray'}} width="300"/>
3838

39-
To change the order that the statuses appear in the **Status** dropdown, you can reorder them on the **Statuses** page, except for **New** and **Closed**. **New** must always be the first status, and **Closed** must always be the last.
39+
To change the order that the statuses appear in the **Status** dropdown, you can reorder them on the **Insight Statuses** tab, except for **New** and **Closed**. **New** must always be the first status, and **Closed** must always be the last.
4040

4141
To change the order of Insight statuses:
4242

4343

4444
1. [**Classic UI**](/docs/cse/introduction-to-cloud-siem/#classic-ui). In the top menu select **Configuration**, and then under **Workflow** select **Statuses**. <br/>[**New UI**](/docs/cse/introduction-to-cloud-siem/#new-ui). In the top menu select **Configuration**, and then under **Cloud SIEM Workflow** select **Insight Statuses**. You can also click the **Go To...** menu at the top of the screen and select **Insight Statuses**.
45-
1. On the **Statuses** page, each status that can be moved has a handle to the left of its name. <br/><img src={useBaseUrl('img/cse/reorder-icons.png')} alt="Reorder icons" style={{border: '1px solid gray'}} width="200"/>
45+
1. On the **Insight Statuses** tab, each status that can be moved has a handle to the left of its name. <br/><img src={useBaseUrl('img/cse/reorder-icons.png')} alt="Reorder icons" style={{border: '1px solid gray'}} width="600"/>
4646
1. To move a status to a different location on the list, use your mouse to drag it to the desired location.
4747

4848
## Edit or delete a custom Insight status
4949

50-
On the **Statuses** page, you can edit or delete any of the custom Insight statuses that have been created. 
50+
On the **Insight Statuses** tab, you can edit or delete any of the custom Insight statuses that have been created. 
5151

5252
The edit and delete icons are only available for custom statuses.
5353

docs/cse/records-signals-entities-insights/entity-criticality.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -31,11 +31,11 @@ You can configure both the detection window and the threshold Activity Score for
3131
## Define a Criticality
3232

3333
1. [**Classic UI**](/docs/cse/introduction-to-cloud-siem/#classic-ui). In the top menu select **Configuration**, and then under **Entities** select **Criticality**. <br/>[**New UI**](/docs/cse/introduction-to-cloud-siem/#new-ui). In the top menu select **Configuration**, and then under **Cloud SIEM Entities** select **Criticality**. You can also click the **Go To...** menu at the top of the screen and select **Criticality**.
34-
1. On the **Entity Criticality** page, click **Create**
35-
1. The **Create Entity Criticality** popup appears.<br/><img src={useBaseUrl('img/cse/criticality-popup.png')} alt="Create Entity Criticality dialog" style={{border: '1px solid gray'}} width="400"/>
34+
1. On the **Criticality** tab, click **+ Add Criticality**
35+
1. The **Add Criticality** popup appears.<br/><img src={useBaseUrl('img/cse/criticality-popup.png')} alt="Create Entity Criticality dialog" style={{border: '1px solid gray'}} width="400"/>
3636
2. **Name**. Enter a name. 
3737
3. **Severity Expression**. Enter a formula for adjusting a severity value. You can use a plus sign (+), minus sign (-), an asterisk (\*), or a forward slash (/). Enter the formula in this format: `severity+2 `
38-
4. Click **Create** to save the Criticality.
38+
4. Click **Save** to save the Criticality.
3939

4040
## Assign a Criticality to an Entity
4141

-2 KB
Loading
-7.25 KB
Loading
-1014 Bytes
Loading

static/img/cse/reorder-icons.png

33.5 KB
Loading

static/img/cse/workflow-page.png

-35.8 KB
Loading

0 commit comments

Comments
 (0)