Merge branch 'main' into DOCS-1183

Author: kimsauce

.github/workflows/pr.yml

@@ -36,6 +36,88 @@ jobs:
         run: yarn install --frozen-lockfile
       - name: Build the Docusaurus site
         run: yarn build
+      # --- Disallowed character checks for Pantheon ---
+      # 1) Fail if any file path in the build output contains disallowed characters
+      - name: Check build artifact paths for disallowed characters
+        env:
+          BUILD_DIR: build
+        shell: bash
+        run: |
+          if [ ! -d "$BUILD_DIR" ]; then
+            echo "No $BUILD_DIR directory found; skipping path check."
+            exit 0
+          fi
+          # Disallowed chars: " : < > | * ?
+          OFFENDERS="$(find "$BUILD_DIR" -type f | grep -E '[":<>|*?]')" || true
+          if [ -n "$OFFENDERS" ]; then
+            echo "❌ Disallowed characters found in build artifact paths:"
+            echo "$OFFENDERS"
+            while IFS= read -r p; do
+              rel="${p#$(pwd)/}"
+              [ "$rel" = "$p" ] && rel="$p"
+              badchars=$(echo "$rel" | grep -oE '[":<>|*?]' | tr -d '\n')
+              echo "::error file=${rel}::Disallowed character(s) found in build artifact path: [${badchars}] (Pantheon rejects paths containing any of: \" : < > | * ?)"
+            done <<< "$OFFENDERS"
+            exit 1
+          fi
+          echo "✅ No disallowed characters found in build artifact paths."
+      # 2) Fail if any Markdown/MDX link target contains disallowed characters (excluding external links).
+      #    Ignores fenced code blocks (```/~~~) and inline code (`...`) to avoid false positives from code samples.
+      - name: Check Markdown/MDX links for disallowed characters
+        shell: bash
+        run: |
+          FILES="$(git ls-files '*.md' '*.mdx' 2>/dev/null || true)"
+          if [ -z "$FILES" ]; then
+            echo "No Markdown/MDX files found; skipping link check."
+            exit 0
+          fi
+          BAD_LINKS=$(
+            awk '
+              BEGIN { in_code=0 }
+              {
+                raw=$0
+
+                # Toggle fenced code blocks starting with ``` or ~~~
+                if (match(raw, /^\s*(```|~~~)/)) { in_code = !in_code; next }
+                if (in_code) { next }
+
+                # Strip inline code spans so patterns inside don’t trigger
+                line = raw
+                gsub(/`[^`]*`/, "", line)
+
+                # Find real Markdown links: [text](url)
+                while (match(line, /\[[^]]+\]\(([^)]+)\)/, m)) {
+                  url=m[1]
+
+                  # Skip external schemes
+                  if (url ~ /^(https?:|mailto:|tel:)/) { line=substr(line, RSTART+RLENGTH); continue }
+
+                  # Drop query + fragment
+                  sub(/\?.*$/, "", url)
+                  sub(/#.*/, "", url)
+
+                  # Disallowed characters in relative link targets: " : < > | * ?
+                  if (url ~ /[":<>|*?]/) {
+                    printf("%s\t%d\t%s\n", FILENAME, FNR, m[0])
+                  }
+
+                  line=substr(line, RSTART+RLENGTH)
+                }
+              }
+            ' $FILES
+          )
+
+          if [ -n "$BAD_LINKS" ]; then
+            echo "❌ Disallowed characters found in Markdown/MDX link targets:"
+            echo "$BAD_LINKS"
+            while IFS=$'\t' read -r file line match; do
+              [ -z "$file" ] && continue
+              badchars=$(echo "$match" | grep -oE '[":<>|*?]' | tr -d '\n')
+              echo "::error file=${file},line=${line}::Disallowed character(s) in Markdown link target: [${badchars}] ${match} (Not allowed: \" : < > | * ?)"
+            done <<< "$BAD_LINKS"
+            exit 1
+          fi
+          echo "✅ No disallowed characters found in Markdown/MDX link targets."
   spellcheck:
     runs-on: ubuntu-latest
     steps:

blog-collector/2025-09-09-otel.md

@@ -0,0 +1,15 @@
+---
+title: Remote Management for OpenTelemetry Collector (OpenTelemetry Collector)
+image: https://help.sumologic.com/img/reuse/rss-image.jpg
+keywords:
+  - collection
+  - opentelemetry
+  - otel
+hide_table_of_contents: true    
+---
+
+import useBaseUrl from '@docusaurus/useBaseUrl';
+
+We're happy to announce that Sumo Logic now enables you to add the collector timezone for OpenTelemetry collectors through the UI in the OpenTelemetry collector create flow. You can select the timezone of your choice while creating the collector. If you do not make a selection, the timezone will be set to `(UTC) Etc/UTC` by default.
+
+[Learn more](/docs/send-data/opentelemetry-collector/install-collector/linux).

blog-service/2021/12-31.md

@@ -0,0 +1,12 @@
+---
+title: Search Job API - Field Update (Search)
+image: https://assets-www.sumologic.com/company-logos/_800x418_crop_center-center_82_none/SumoLogic_Preview_600x600.jpg?mtime=1617040082
+keywords:
+  - query-assist
+  - search
+hide_table_of_contents: true    
+---
+
+import useBaseUrl from '@docusaurus/useBaseUrl';
+
+We’re excited to announce that the `requiresRawMessages` field for creating a search job will now be set to **false** by default. This change improves the performance of aggregate queries by eliminating the overhead of generating raw messages. [Learn more](/docs/api/search-job/#create-a-search-job)

blog-service/2025-10-09-search.md

@@ -34,6 +34,7 @@
   "/01Start-Here/04Getting-Started/Getting-the-Most-out-of-Sumo-Logic": "/docs/get-started/sign-up",
   "/01Start-Here/04Getting-Started/Certification_FAQs": "/docs/get-started/training-certification-faq",
   "/docs/get-started/certification-faq": "/docs/get-started/training-certification-faq",
+  "/docs/certifications/free-training": "/docs/get-started/training-certification-faq",
   "/01Start-Here/05Customize-Your-Sumo-Logic-Experience": "/docs/get-started/account-settings-preferences",
   "/01Start-Here/05Customize-Your-Sumo-Logic-Experience/Change-Your-Email-Address": "/docs/get-started/account-settings-preferences",
   "/01Start-Here/05Customize-Your-Sumo-Logic-Experience/Change-Your-Password": "/docs/get-started/account-settings-preferences",
@@ -3011,6 +3012,7 @@
   "/Cloud_SIEM_Enterprise/CSE_Rules/Import_YARA_Rules": "/docs/cse/rules/import-yara-rules",
   "/Cloud_SIEM_Enterprise/CSE_Rules/Normalized_Authentication_Rules": "/docs/cse/rules/normalized-authentication-rules",
   "/Cloud_SIEM_Enterprise/CSE_Rules/Normalized_Threat_Rules": "/docs/cse/rules/normalized-threat-rules",
+  "/docs/cloud-siem/actions-automation": "/docs/cse/automation",
   "/docs/cse/rules/rule-expression-syntax": "/docs/cse/rules/cse-rules-syntax",
   "/Cloud_SIEM_Enterprise/CSE_Rules/Rule_Tuning_Expressions": "/docs/cse/rules/rule-tuning-expressions",
   "/Cloud_SIEM_Enterprise/CSE_Rules/Tailor_a_Global_Rule": "/docs/cse/rules/tailor-global-rule",
@@ -3076,6 +3078,7 @@
   "/Cloud_SIEM_Enterprise/Records,_Signals,_Entities,_and_Insights/05Set_Insight_Generation_Window_and_Threshold": "/docs/cse/records-signals-entities-insights/set-insight-generation-window-threshold",
   "/Cloud_SIEM_Enterprise/Records,_Signals,_Entities,_and_Insights/07Entity_Criticality": "/docs/cse/records-signals-entities-insights/entity-criticality",
   "/Cloud_SIEM_Enterprise/Records,_Signals,_Entities,_and_Insights/09Global_Intelligence_for_Security_Insights": "/docs/cse/records-signals-entities-insights/global-intelligence-security-insights",
+  "/Cloud_SIEM_Enterprise/Records,_Signals,_Entities,_and_Insights/11Create_a_Custom_Entity_Type": "/docs/cse/records-signals-entities-insights/create-custom-entity-type",
   "/Cloud_SIEM_Enterprise/Records,_Signals,_Entities,_and_Insights/13Using_Tags_with_Insights,_Signals,_Entities,_and_Rules": "/docs/cse/records-signals-entities-insights/tags-insights-signals-entities-rules",
   "/Cloud_SIEM_Enterprise/Records,_Signals,_Entities,_and_Insights/15Searching_for_CSE_Data_in_Sumo_Logic": "/docs/cse/records-signals-entities-insights/search-cse-records-in-sumo",
   "/Cloud_SIEM_Enterprise/Records,_Signals,_Entities,_and_Insights/15Searching_for_CSE_Records_in_Sumo_Logic": "/docs/cse/records-signals-entities-insights/search-cse-records-in-sumo",
@@ -3107,6 +3110,7 @@
   "/Global_Intelligence/Global_Intelligence_for_Apache/Collect_Logs_for_the_Global_Intelligence_for_Apache_App": "/docs/integrations/global-intelligence/apache",
   "/Global_Intelligence/Global_Intelligence_for_Apache/Install_the_Global_Intelligence_for_Apache_App_and_View_the_Dashboards": "/docs/integrations/global-intelligence/apache",
   "/Help": "/docs/get-started/help",
+  "/Integrations": "/docs/integrations",
   "/Internal_Writers/Topic_Archive/Parse_by_Data_Type/Parse_Apache_Logs/Parse_Apache_Access_Logs": "/docs/search/get-started-with-search/suggested-searches/apache-access-parser",
   "/Internal_Writers/Topic_Archive/Parse_by_Data_Type/Parse_Apache_Logs/Parse_Apache_Error_Logs": "/docs/search/get-started-with-search/suggested-searches/apache-errors-parser",
   "/Internal_Writers/Topic_Archive/Parse_by_Data_Type/Parse_Cisco_ASA_Logs": "/",
@@ -3389,6 +3393,7 @@
   "/Manage/Security/Installation_Tokens": "/docs/manage/security/installation-tokens",
   "/Manage/Security/SAML": "/docs/manage/security/saml",
   "/docs/manage/security/saml/integrate-azure-ad": "/docs/manage/security/saml/integrate-sumo-with-azure-ad",
+  "/docs/manage/security/sumo-logic-security-faq": "/docs/manage/security",
   "/Manage/Security/SAML/01-Set-Up-SAML-for-Single-Sign-On": "/docs/manage/security/saml/set-up-saml",
   "/Manage/Security/SAML/Integrate_Sumo_Logic_with_OneLogin": "/docs/manage/security/saml/integrate-onelogin",
   "/Manage/Security/SAML/Integrate_Sumo_with_AWS_Single_Sign-On": "/docs/manage/security/saml/integrate-aws-sso",
@@ -4521,5 +4526,6 @@
   "/docs/cse/signals": "/docs/cse/records-signals-entities-insights",
   "/docs/query/query-operators/aggregation-functions": "/docs/search/search-query-language/group-aggregate-operators",
   "/Search/Search-Query-Language/Parse-Operators": "/docs/search/search-query-language/parse-operators",
+  "/docs/search/get-started-with-search-language/parsing-operators": "/docs/search/search-query-language/parse-operators",
   "/docs/get-started/training-certification-faq-new": "/docs/get-started/training-certification-faq"
 }

cid-redirects.json

@@ -11,19 +11,19 @@ Sumo Logic offers several alerting features. See the topics below for details on
 <div className="box-wrapper" markdown="1">
 <div className="box smallbox card">
   <div className="container">
-  <a href="/docs/alerts/monitors"><img src={useBaseUrl('img/icons/alerts.png')} alt="icon" width="40"/><h4>Monitors</h4></a>
+  <a href={useBaseUrl('docs/alerts/monitors')}><img src={useBaseUrl('img/icons/alerts.png')} alt="icon" width="40"/><h4>Monitors</h4></a>
   <p>Configure alerting policies notify you about critical changes or issues affecting your production applications.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-  <a href="/docs/alerts/scheduled-searches"><img src={useBaseUrl('img/icons/alerts.png')} alt="icon" width="40"/><h4>Scheduled Searches</h4></a>
+  <a href={useBaseUrl('docs/alerts/scheduled-searches')}><img src={useBaseUrl('img/icons/alerts.png')} alt="icon" width="40"/><h4>Scheduled Searches</h4></a>
   <p>Create saved searches that are executed continuously on a schedule you set, monitoring your stack.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-  <a href="/docs/alerts/difference-from-scheduled-searches"><img src={useBaseUrl('img/icons/alerts.png')} alt="icon" width="40"/><h4>Monitors vs. Scheduled Searches</h4></a>
+  <a href={useBaseUrl('docs/alerts/difference-from-scheduled-searches')}><img src={useBaseUrl('img/icons/alerts.png')} alt="icon" width="40"/><h4>Monitors vs. Scheduled Searches</h4></a>
   <p>Learn about the feature differences between Monitors and Scheduled Searches.</p>
   </div>
 </div>

docs/alerts/index.md

@@ -14,67 +14,67 @@ In this section, we'll introduce the following concepts:
 <div className="box-wrapper" markdown="1">
 <div className="box smallbox card">
   <div className="container">
-  <a href="/docs/alerts/monitors/overview"><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Overview</h4></a>
+  <a href={useBaseUrl('docs/alerts/monitors/overview')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Overview</h4></a>
   <p>Set up monitors to continuously query your logs or metrics and send notifications when specific events occur.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-  <a href="/docs/alerts/monitors/create-monitor"><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Create a Monitor</h4></a>
+  <a href={useBaseUrl('docs/alerts/monitors/create-monitor')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Create a Monitor</h4></a>
   <p>Learn how to create a monitor.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-  <a href="/docs/alerts/monitors/settings"><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Monitor Settings</h4></a>
+  <a href={useBaseUrl('docs/alerts/monitors/settings')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Monitor Settings</h4></a>
   <p>Learn how to view, create, manage, and organize Monitors.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-    <a href="/docs/alerts/monitors/monitor-faq"><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Monitors FAQ</h4></a>
+    <a href={useBaseUrl('docs/alerts/monitors/monitor-faq')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Monitors FAQ</h4></a>
   <p>This topic lists the common FAQs regarding Monitors.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-    <a href="/docs/alerts/monitors/alert-variables"><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Variables</h4></a>
+    <a href={useBaseUrl('docs/alerts/monitors/alert-variables')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Variables</h4></a>
   <p>Use Alert Variables as parameters to customize the JSON payload object of your alert notifications.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-    <a href="/docs/alerts/monitors/alert-response"><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Response</h4></a>
+    <a href={useBaseUrl('docs/alerts/monitors/alert-response')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Response</h4></a>
   <p>Get contextual insights about triggered alerts to minimize the time needed to investigate and resolve application failures.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-  <a href="/docs/alerts/monitors/alert-response-faq"><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Response FAQ</h4></a>
+  <a href={useBaseUrl('docs/alerts/monitors/alert-response-faq')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Response FAQ</h4></a>
   <p>This topic lists the common FAQs regarding Alert Response.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-  <a href="/docs/alerts/monitors/alert-grouping"><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Grouping</h4></a>
+  <a href={useBaseUrl('docs/alerts/monitors/alert-grouping')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Grouping</h4></a>
 <p>Customize how your alerts are generated from monitors by specifying a grouping condition based on specific fields.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-  <a href="/docs/alerts/monitors/muting-schedules"><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Muting Schedules</h4></a>
+  <a href={useBaseUrl('docs/alerts/monitors/muting-schedules')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Muting Schedules</h4></a>
   <p>Pause alert notifications from monitors according to the schedule that you define.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-  <a href="/docs/manage/ingestion-volume/monitor-ingestion-receive-alerts"><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Monitor Log Ingestion and Alerts</h4></a>
+  <a href={useBaseUrl('docs/manage/ingestion-volume/monitor-ingestion-receive-alerts')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Monitor Log Ingestion and Alerts</h4></a>
   <p>Add Scheduled Searches that monitor log ingestion and send alerts.</p>
   </div>
 </div>
 <div className="box smallbox card">
   <div className="container">
-  <a href="/docs/alerts/monitors/use-playbooks-with-monitors"><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Automated Playbooks in Monitors</h4></a>
+  <a href={useBaseUrl('docs/alerts/monitors/use-playbooks-with-monitors')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Automated Playbooks in Monitors</h4></a>
   <p>Learn how to use Automation Service playbooks with monitors.</p>
   </div>
 </div>