Skip to content

Commit 9797940

Browse files
committed
Copilot fixes
1 parent 2a13808 commit 9797940

File tree

1 file changed

+12
-13
lines changed

1 file changed

+12
-13
lines changed

docs/search/copilot.md

Lines changed: 12 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -104,16 +104,22 @@ Break your questions into smaller, specific requirements to help Copilot provide
104104
see https://drive.google.com/file/d/10XUn4DQD3K91V3Qf5heCizkHJneTaBJ7/view?usp=sharing
105105
--->
106106

107-
Copilot is built on [Sumo Logic search query language](/docs/search/search-query-language). Below are key functions you can call using natural language prompts:
107+
##### Tips and tricks
108+
109+
* **Start with a broad query**. Begin with a query like `Show me the most recent logs` to understand the structure and available fields in your logs.
110+
* **Clarify field names**. If fields have similar names and cause confusion, explicitly specify the field (e.g., `<field_name>`) to improve accuracy.
111+
* **Experiment with phrasing**. Try multiple variations of a query to provide context and receive more relevant suggestions.
112+
* **Include time for timeslicing**. When timeslicing data, include the term `time` in your query. For example: `Count requests, every 1m, different code challenges and user used during login attempts by time`.
108113

109-
* `Count logs by` [field(s)]
110-
* `Group logs by` [field(s)]
114+
Below are examples of how you can phrase queries if the autocompletions and contextual suggestions are not relevant to you:
115+
116+
* `Count logs by` [field(s)] and `Group logs by` [field(s)] produce the same result
111117
* `Sort by` [field(s)] [in descending order]
112-
* `Percentage breakdown in` [field] `values`
118+
* `Percentage by` [field] `values`
113119
* `Find` [stat] `for` [field] (max, min, standard deviation, etc.)
114120
* `Filter by` [field] `contains` [keyword]
115-
:::note
116-
Keyword searches are case-sensitive
121+
:note
122+
Keyword searches are case-sensitive.
117123
:::
118124
* `Apply logreduce to logs`
119125

@@ -122,13 +128,6 @@ Additional prompts can trigger more advanced activities (e.g., mapping network a
122128
* `Analyze risk and severity of network activity`
123129
* `Identify top application categories accessed`
124130

125-
##### Tips and tricks
126-
127-
* **Start with a broad query**. Begin with a query like `Show me the most recent logs` to understand the structure and available fields in your logs.
128-
* **Clarify field names**. If fields have similar names and cause confusion, explicitly specify the field (e.g., `<field_name>`) to improve accuracy.
129-
* **Experiment with phrasing**. Try multiple variations of a query to provide context and receive more relevant suggestions.
130-
* **Include time for timeslicing**. When timeslicing data, include the term `time` in your query. For example: `Count requests, every 1m, different code challenges and user used during login attempts by time`.
131-
132131
#### Time range
133132

134133
By default, Copilot searches run with a 15-minute time range. If your search returns no results, consider expanding the time range.

0 commit comments

Comments
 (0)