Skip to content

Commit 9550f94

Browse files
Merge remote-tracking branch 'refs/remotes/origin/google-cloud-storage-doc' into google-cloud-storage-doc
2 parents d8192fb + cde02f4 commit 9550f94

File tree

349 files changed

+2115
-162
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

349 files changed

+2115
-162
lines changed

docs/integrations/google/cloud-storage.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -91,7 +91,7 @@ cloud.provider=gcp project_id=* metric=storage/object_count statistic=average
9191

9292
## Collect logs for Google Cloud Storage
9393

94-
This page describes the Sumo pipeline for ingesting logs from Google Cloud Platform (GCP) services, and provides instructions for collecting logs from Google Cloud Storage.
94+
This section describes the Sumo Logic pipeline for ingesting logs from Google Cloud Platform (GCP) services, and explains how to collect logs from Google Cloud Storage.
9595

9696
### Collection Process for GCP Services
9797

@@ -107,12 +107,12 @@ Follow the steps below to configure the collection for GCP:
107107

108108
1. Configure a GCP source on a hosted collector. You'll obtain the **HTTP URL for the source**.
109109
2. Create a topic in Google Pub/Sub and subscribe the GCP source URL to that topic.
110-
3. Create an export of GCP logs from Google Log Router. Exporting involves writing a filter that selects the log entries you want to export, and choosing a Pub/Sub as the destination. The filter and destination are held in an object called a sink.
110+
3. Create an export of GCP logs from Google Log Router. Exporting involves writing a filter that selects the log entries you want to export and choosing a Pub/Sub as the destination. The filter and destination are held in an object called a sink.
111111

112112
Refer to the following sections for configuration instructions.
113113

114114
:::note
115-
Logs from GCP services can be [exported](https://cloud.google.com/logging/docs/export/configure_export_v2) to any destination. Any GCP logs can be [excluded](https://cloud.google.com/logging/docs/exclusions) from Logs router.
115+
Logs from GCP services can be [exported](https://cloud.google.com/logging/docs/export/configure_export_v2) to any destination. Any GCP logs can be [excluded](https://cloud.google.com/logging/docs/exclusions) from the Logs router.
116116
:::
117117

118118
### Configure a Google Cloud Platform Source
@@ -122,10 +122,10 @@ The Google Cloud Platform (GCP) Source receives log data from Google Pub/Sub.
122122
:::note
123123
You can use the same GCP Source to receive log data from multiple GCP services. For example, you can send logs collected from Google Cloud Application Engine, Google Cloud IAM, and Google Cloud Audit.
124124

125-
However, this is not recommended since you cannot define specific Source Category values to each GCP service. If you create a GCP Source for each service you can define a specific Source Category to each service.
125+
However, this is not recommended since you cannot define specific Source Category values for each GCP service. If you create a GCP Source for each service you can define a specific Source Category for each service.
126126
:::
127127

128-
This Source will be a Google Pub/Sub-only Source, which means that it will only be usable for log data formatted as data coming from Google Pub/Sub.
128+
This Source will be a Google Pub/Sub-only Source, indicating that it will only be usable for log data formatted as data coming from Google Pub/Sub.
129129

130130
1. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Manage Data > Collection > Collection**. <br/>[**New UI**](/docs/get-started/sumo-logic-ui). In the Sumo Logic top menu select **Configuration**, and then under **Data Collection** select **Collection**. You can also click the **Go To...** menu at the top of the screen and select **Collection**.
131131

@@ -145,7 +145,7 @@ This Source will be a Google Pub/Sub-only Source, which means that it will only
145145
8. **Advanced Options for Logs**.<br/><img src={useBaseUrl('img/integrations/google/GCP-advanced-options-Jan-22.png')} alt="Google integrations" />
146146

147147
* **Timestamp Parsing**. This option is selected by default. If it's deselected, no timestamp information is parsed at all.
148-
* **Time Zone**. There are two options for Time Zone. You can use the time zone present in your log files, and then choose an option in case time zone information is missing from a log message. Or, you can have Sumo Logic completely disregard any time zone information present in logs by forcing a time zone. It's very important to have the proper time zone set, no matter which option you choose. If the time zone of logs cannot be determined, Sumo Logic assigns logs UTC; if the rest of your logs are from another time zone your search results will be affected.
148+
* **Time Zone**. There are two options for the Time Zone. You can use the time zone present in your log files, and then choose an option in case time zone information is missing from a log message. Or, you can have Sumo Logic completely disregard any time zone information present in logs by forcing a time zone. It's very important to have the proper time zone set, no matter which option you choose. If the time zone of logs cannot be determined, Sumo Logic assigns logs UTC; if the rest of your logs are from another time zone your search results will be affected.
149149
* **Timestamp Format**. By default, Sumo Logic will automatically detect the timestamp format of your logs. However, you can manually specify a timestamp format for a Source. See [Timestamps, Time Zones, Time Ranges, and Date Formats](/docs/send-data/reference-information/time-reference) for more information.
150150

151151
9. **Processing Rules**. Configure any desired filters, such as allowlist, denylist, hash, or mask, as described in [Create a Processing Rule](/docs/send-data/collection/processing-rules/create-processing-rule).
@@ -180,7 +180,7 @@ We recommend the following:
180180

181181
### Create export of Google Cloud Storage logs from Google Logging
182182

183-
In this step you export logs to the Pub/Sub topic you created in the previous step.
183+
In this step, you export logs to the Pub/Sub topic you created in the previous step.
184184

185185
1. Go to **Logging** and click **Logs Router**.<br/><img src={useBaseUrl('img/integrations/google/GCP_logging_1.png')} alt="Google integrations" />
186186

@@ -203,10 +203,10 @@ For metrics collection in Sumo Logic, use the [GCP Metric source](/docs/send-dat
203203

204204
1. Set up the [Google Service Account](/docs/send-data/hosted-collectors/google-source/gcp-metrics-source/#google-service-account).
205205

206-
2. Set up a [GCP Metric source](/docs/send-data/hosted-collectors/google-source/gcp-metrics-source/#set-up-a-gcp-metrics-source) in Sumo Logic. While setting up the source, select **Cloud Storage** as the service from dropdown to get the Google Cloud Storage metrics.
206+
2. Set up a [GCP Metric source](/docs/send-data/hosted-collectors/google-source/gcp-metrics-source/#set-up-a-gcp-metrics-source) in Sumo Logic. While setting up the source, select **Cloud Storage** as the service from the dropdown to get the Google Cloud Storage metrics.
207207

208208
## Installing the Google Cloud Storage App
209-
Now that you have set up collection for Google Cloud Storage, install the Sumo Logic App to use the pre-configured searches and dashboards that provide visibility into your environment for real-time analysis of overall usage.
209+
Now that you have set up the collection for Google Cloud Storage, install the Sumo Logic App to use the pre-configured searches and dashboards that provide visibility into your environment for real-time analysis of overall usage.
210210

211211
import AppInstall2 from '../../reuse/apps/app-install-v2.md';
212212

@@ -263,7 +263,7 @@ See information about key Google Cloud Storage usage metrics, operational activi
263263

264264
### Google Cloud Storage - Storage Optimization and Authorization
265265

266-
See information about key Google Cloud Storage bucket optimization opportunities, including storage class distribution, object lifecycle management, and authorization patterns to identify potential cost savings and security improvements.
266+
See information about key Google Cloud Storage bucket optimization opportunities, including the storage class distribution, object lifecycle management, and authorization patterns to identify potential cost savings and security improvements.
267267

268268
<img src={useBaseUrl('img/integrations/google/Google-Cloud-Storage-Storage-Optimization-and-Authorization.png')} alt="Google Cloud Storage dashboards" />
269269

docs/integrations/microsoft-azure/azure-key-vault.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
88

99
<img src={useBaseUrl('img/integrations/microsoft-azure/azure-key-vault.png')} alt="Thumbnail icon" width="50"/>
1010

11-
[Azure Key Vault](https://learn.microsoft.com/en-us/azure/key-vault/general/overview) is a managed service hosted in the cloud that acts as a central message hub for communication between an IoT application and its attached devices. This integration helps in comprehensive monitoring of your key vaults requests, performance, failures, and latency.
11+
[Azure Key Vault](https://learn.microsoft.com/en-us/azure/key-vault/) is a cloud service that helps you securely store and manage secrets, keys, and certificates. You can use it to protect data for cloud apps and services. This integration helps in comprehensive monitoring of your Key Vault operations, requests, failures, and latency.
1212

1313
## Log and metric types
1414

docs/integrations/saas-cloud/cyberark-audit.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
99

1010
<img src={useBaseUrl('img/send-data/cyberark.png')} alt="thumbnail icon" width="50"/>
1111

12-
The Sumo Logic app for CyberArk Audit is a robhust tool that provides insights into your organization's cybersecurity practices. It helps IT and security teams monitor, analyze, and visualize audit trails of user activities, security events, and anomalies. By tracking data on security events, identity management, component usage, and administrative actions, the app delivers actionable intelligence to identify and mitigate security risks, ensuring compliance with regulations and internal policies. Customizable dashboards and detailed reporting enhance its ability to strengthen security.
12+
The Sumo Logic app for CyberArk Audit is a robust tool that provides insights into your organization's cybersecurity practices. It helps IT and security teams monitor, analyze, and visualize audit trails of user activities, security events, and anomalies. By tracking data on security events, identity management, component usage, and administrative actions, the app delivers actionable intelligence to identify and mitigate security risks, ensuring compliance with regulations and internal policies. Customizable dashboards and detailed reporting enhance its ability to strengthen security.
1313

1414
:::info
1515
This app includes [built-in monitors](#cyberark-audit-monitors). For details on creating custom monitors, refer to [Create monitors for CyberArk Audit app](#create-monitors-for-cyberark-audit-app).

docs/platform-services/automation-service/about-automation-service.md

Lines changed: 1 addition & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -88,12 +88,7 @@ Access to the Automation Service is controlled by [role capabilities](/docs/mana
8888

8989
### Configure the connection for an integration resource
9090

91-
To use [integrations](/docs/platform-services/automation-service/automation-service-integrations), you must configure the connection for their resources.
92-
1. [**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Automation** and then select **Integrations** in the left nav bar. <br/>[**New UI**](/docs/get-started/sumo-logic-ui). In the main Sumo Logic menu, select **Automation > Integrations**. You can also click the **Go To...** menu at the top of the screen and select **Integrations**.
93-
1. Select the integration whose resource you want to configure the connection for.
94-
1. Hover over the resource name and click the **Edit** button that appears.<br/><img src={useBaseUrl('img/cse/automations-edit-resource.png')} style={{border:'1px solid gray'}} alt="Edit a resource" width="800"/>
95-
1. Enter the connection configuration needed by the resource. (Find the integration in [Integrations in App Central](/docs/platform-services/automation-service/app-central/integrations/) for configuration instructions.)<br/>What you enter is specific to the resource you're using. Each resource's configuration screen may be different, but in most cases, you will need information such as IP addresses, API tokens, usernames, and passwords for the application you're integrating with. For example, in the following screen enter the **API URL** and **API Key**. <br/><img src={useBaseUrl('img/cse/automations-edit-resource-2.png')} style={{border:'1px solid gray'}} alt="Edit a resource" width="400"/>
96-
1. Click **Save** to save the configuration.
91+
To use [integrations](/docs/platform-services/automation-service/automation-service-integrations), you must first configure the connection for their resources. See [Configure Authentication for Integrations](/docs/platform-services/automation-service/configure-authentication-for-integrations/).
9792

9893
## Actions limit
9994

docs/platform-services/automation-service/app-central/index.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,12 @@ In this section, we'll introduce the following concepts:
1818
<p>Learn how to use App Central to get new applications and tools.</p>
1919
</div>
2020
</div>
21+
<div className="box smallbox card">
22+
<div className="container">
23+
<a href="/docs/platform-services/automation-service/configure-authentication-for-integrations/"><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="icon" width="40"/><h4>Configure Authentication for Integrations</h4></a>
24+
<p>Learn how to configure authentication for integrations.</p>
25+
</div>
26+
</div>
2127
<div className="box smallbox card">
2228
<div className="container">
2329
<a href="/docs/platform-services/automation-service/app-central/integrations/"><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="icon" width="40"/><h4>Integrations in App Central</h4></a>

docs/platform-services/automation-service/app-central/integrations/abnormal-security.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,11 @@ Abnormal Security provides advanced email security to prevent credential phishin
2525
* **Get Employee Identity Analysis** *(Enrichment)* - Get employee identity analysis (Genome) data.
2626
* **Get Employee Information** *(Enrichment)* - Get employee information.
2727

28-
## Abnormal Security in Automation Service and Cloud SOAR
28+
## Configure Abnormal Security in Automation Service and Cloud SOAR
29+
30+
import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
31+
32+
<IntegrationsAuth/>
2933

3034
1. Access integrations in the [Automation Service](/docs/platform-services/automation-service/automation-service-integrations/#view-integrations) or [Cloud SOAR](/docs/cloud-soar/automation/).
3135
1. After the list of the integrations appears, search for the integration and click on the row.

docs/platform-services/automation-service/app-central/integrations/abuse.ch-sslbl-feed.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,11 @@ An SSL certificate can be associated with one or more servers (IP address:port c
2222
* I strongly recommend you to not use the aggressive version of the Botnet C2 IP blacklist as it definitely will cause false positives. If you want to reduce the amount of false positives, do not use this option. If you want to get maximum protection and do not care about false positives, you can enable the action by selecting the checkbox (not recommended).
2323
* More info: 'https://sslbl.abuse.ch/'
2424

25-
## Abuse.ch SSLBL Feed in Automation Service and Cloud SOAR
25+
## Configure Abuse.ch SSLBL Feed in Automation Service and Cloud SOAR
26+
27+
import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
28+
29+
<IntegrationsAuth/>
2630

2731
1. Access integrations in the [Automation Service](/docs/platform-services/automation-service/automation-service-integrations/#view-integrations) or [Cloud SOAR](/docs/cloud-soar/automation).
2832
1. After the list of the integrations appears, search/look for the integration and click on the row.

docs/platform-services/automation-service/app-central/integrations/abuseipdb.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,11 @@ Enrich IP addresses with reputation information gathered from AbuseIPDB.
2929
4. Click on **Create Key**.
3030
5. Copy the **API key**.
3131

32-
## Configure AbuseIPDB
32+
## Configure AbuseIPDB in Automation Service and Cloud SOAR
33+
34+
import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
35+
36+
<IntegrationsAuth/>
3337

3438
1. Access integrations in the [Automation Service](/docs/platform-services/automation-service/automation-service-integrations/#view-integrations) or [Cloud SOAR](/docs/cloud-soar/automation).
3539
2. After the list of the integrations appears, search for the integration and click on the row.

docs/platform-services/automation-service/app-central/integrations/acronis.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,11 @@ Follow these steps to get your API key from Arconis.
2424
1. Click **+ Create API Client** and enter a name. <br/><img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/acronis/acronis-3.png')} style={{border:'1px solid gray'}} alt="acronis-3" width="400"/> <br/><img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/acronis/acronis-4.png')} style={{border:'1px solid gray'}} alt="acronis-4" width="400"/>
2525
1. Copy and save the Client ID, Secret, and Data center URL. <br/><img src={useBaseUrl('/img/platform-services/automation-service/app-central/integrations/acronis/acronis-5.png')} style={{border:'1px solid gray'}} alt="acronis-5" width="400"/>
2626

27-
## Acronis in Automation Service and Cloud SOAR
27+
## Configure Acronis in Automation Service and Cloud SOAR
28+
29+
import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
30+
31+
<IntegrationsAuth/>
2832

2933
1. Access integrations in the [Automation Service](/docs/platform-services/automation-service/automation-service-integrations/#view-integrations) or [Cloud SOAR](/docs/cloud-soar/automation).
3034
1. After the list of the integrations appears, search for the integration and click on the row.

docs/platform-services/automation-service/app-central/integrations/active-directory-v2.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,11 @@ If an existing Windows Server is not available, follow these steps to set up a n
7676
1. After rebooting, log back in and open **Active Directory Users and Computers**.
7777
1. Verify that the domain is properly configured.
7878

79-
## Active Directory V2 in Automation Service and Cloud SOAR
79+
## Configure Active Directory V2 in Automation Service and Cloud SOAR
80+
81+
import IntegrationsAuth from '../../../../reuse/integrations-authentication.md';
82+
83+
<IntegrationsAuth/>
8084

8185
### Required resources from an existing Active Directory installation
8286

0 commit comments

Comments
 (0)