Skip to content

Commit c455e46

Browse files
committed
Change release note date to June 16 2025
1 parent 1533f79 commit c455e46

File tree

1 file changed

+6
-6
lines changed

1 file changed

+6
-6
lines changed
Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -15,17 +15,17 @@ To support this update, Sumo Logic has revised several AWS apps and Cloud SIEM p
1515

1616
To learn more, see [Important changes to CloudTrail events for AWS IAM Identity Center](https://aws.amazon.com/blogs/security/modifications-to-aws-cloudtrail-event-data-of-iam-identity-center/).
1717

18-
## Impact following the AWS CloudTrail updates
18+
### Impact following the AWS CloudTrail updates
1919

2020
AWS is updating CloudTrail events for IAM Identity Center, affecting how user identity data is structured. So, if you are using the updated fields in your Cloud SIEM content or across the Sumo Logic platform, you need to update any saved queries, dashboards, or detection rules to reflect these changes and ensure continued functionality.
2121

2222
Key actions required while updating the AWS CloudTrail include:
2323
- Sumo Logic provided apps must be manually reinstalled to incorporate the updated event field mappings.
2424
- Cloud SIEM parsers have auto-updated and require no customer intervention.
2525

26-
## Action plan for Sumo Logic users
26+
### Action plan for Sumo Logic users
2727

28-
### Step 1: Reinstall the relevant Sumo Logic apps
28+
#### Step 1: Reinstall the relevant Sumo Logic apps
2929

3030
If you're using any of the following apps that consume CloudTrail data, you must reinstall them:
3131
- [Amazon CloudTrail – Cloud Security Monitoring and Analytics](/docs/integrations/cloud-security-monitoring-analytics/aws-cloudtrail/)
@@ -45,7 +45,7 @@ To reinstall any of the above apps, follow the steps below:
4545
These are Classic apps (V1), and reinstalling them will create a new folder in your Content Library with updated dashboards.
4646
:::
4747

48-
### Step 2: Update the custom saved searches and dashboards
48+
#### Step 2: Update the custom saved searches and dashboards
4949

5050
If you’ve created custom content based on CloudTrail fields, manual field updates as given below will be required to accommodate the new schema:
5151
- Move the `userName` field from the `userIdentity` element to the `additionalEventData` element.
@@ -60,8 +60,8 @@ AWS plans to implement these enhancements on [July 14, 2025](https://aws.amazon.
6060
Sumo Logic apps are backward-compatible, allowing you to update the apps ahead of time. For any custom content outside of Sumo Logic’s apps or parsers, ensure your changes are backward compatible and deploy updates before July 14, 2025.
6161
:::
6262

63-
## FAQ
63+
### FAQ
6464

65-
### What happens if I don’t update my applications or searches?
65+
#### What happens if I don’t update my applications or searches?
6666

6767
Failure to update your apps, saved searches, or dashboards will result in user-related fields not being parsed correctly. Consequently, visualizations and panels relying on those fields will appear empty or display inaccurate data.

0 commit comments

Comments
 (0)