Skip to content

Commit e1eefe3

Browse files
jpipkin1jpipkin1
authored
Merge branch 'main' into docs-888-more-improvements-to-automation-integrations
2 parents 8e89066 + 5a297a7 commit e1eefe3

File tree

16 files changed

+238
-83
lines changed

16 files changed

+238
-83
lines changed

‎.github/workflows/build_and_deploy.yml‎

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,8 @@
11
name: Build and Deploy
22

3+
permissions:
4+
contents: read
5+
36
on:
47
workflow_call:
58
inputs:
@@ -13,7 +16,7 @@ on:
1316
default: "/"
1417
type: string
1518
environment:
16-
description: GHA environment name
19+
description: GitHub Actions environment name (used for scoping secrets and deployment)
1720
required: true
1821
type: string
1922
secrets:
@@ -35,6 +38,7 @@ jobs:
3538
env:
3639
CI: true
3740
NODE_ENV: production
41+
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
3842
AWS_PAGER: ""
3943
HOSTNAME: ${{ inputs.hostname }}
4044
BASE_URL: ${{ inputs.base_url }}
@@ -53,16 +57,14 @@ jobs:
5357
uses: actions/cache@v3
5458
with:
5559
path: node_modules/.cache
56-
key: ${{ runner.os }}-webpack-cache
60+
key: ${{ runner.os }}-webpack-cache-${{ hashFiles('yarn.lock') }}
5761
- name: Install awscli
5862
uses: unfor19/install-aws-cli-action@v1
5963
- name: Install jq
6064
run: sudo apt-get install -y jq
6165
- name: Install dependencies
6266
run: yarn install --frozen-lockfile
6367
- name: Build the Docusaurus site
64-
env:
65-
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
6668
run: yarn build
6769
- name: Deploy the Docusaurus site
6870
env:

‎.github/workflows/delete-review.yml‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,8 @@
11
name: delete-review
22

3+
permissions:
4+
contents: read
5+
36
on: delete
47

58
jobs:
@@ -9,6 +12,7 @@ jobs:
912
name: review/${{ github.ref_name }}
1013
env:
1114
CI: true
15+
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
1216
AWS_PAGER: ""
1317
BASE_URL: /${{ github.ref_name }}/
1418
AWS_DEFAULT_REGION: us-east-1
@@ -23,6 +27,7 @@ jobs:
2327
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
2428
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
2529
run: |
30+
echo "Removing files at s3://${S3_BUCKET_NAME}${BASE_URL}"
2631
aws s3 rm --recursive s3://${S3_BUCKET_NAME}${BASE_URL}
2732
export INVALIDATION_ID=$(
2833
aws cloudfront create-invalidation \

‎.github/workflows/pr.yml‎

Lines changed: 36 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -1,40 +1,44 @@
11
name: Pull Request Checks
22

3+
permissions:
4+
contents: read
5+
pull-requests: read
6+
37
on:
4-
pull_request:
5-
branches:
6-
- main
7-
merge_group:
8-
types:
9-
- checks_requested
8+
pull_request:
9+
branches:
10+
- main
11+
merge_group:
12+
types:
13+
- checks_requested
14+
15+
env:
16+
CI: true
17+
NODE_ENV: production
18+
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
1019

1120
jobs:
12-
build-and-deploy:
13-
runs-on: ubuntu-latest
14-
env:
15-
CI: true
16-
NODE_ENV: production
17-
steps:
18-
- uses: actions/checkout@v4
19-
- name: Set up Node.js
20-
uses: actions/setup-node@v3
21-
with:
22-
node-version: '20.x'
23-
cache: 'yarn'
24-
- name: Docusaurus Webpack cache
25-
uses: actions/cache@v3
26-
with:
27-
path: node_modules/.cache
28-
key: ${{ runner.os }}-webpack-cache
29-
- name: Install dependencies
30-
run: yarn install --frozen-lockfile
31-
- name: Build the Docusaurus site
32-
env:
33-
NODE_OPTIONS: "--max-old-space-size=8192 --max-http-header-size=8192"
34-
run: yarn build
35-
spellcheck:
36-
runs-on: ubuntu-latest
37-
steps:
21+
build-and-deploy:
22+
runs-on: ubuntu-latest
23+
steps:
24+
- uses: actions/checkout@v4
25+
- name: Set up Node.js
26+
uses: actions/setup-node@v3
27+
with:
28+
node-version: '20.x'
29+
cache: 'yarn'
30+
- name: Docusaurus Webpack cache
31+
uses: actions/cache@v3
32+
with:
33+
path: node_modules/.cache
34+
key: ${{ runner.os }}-webpack-cache-${{ hashFiles('yarn.lock') }}
35+
- name: Install dependencies
36+
run: yarn install --frozen-lockfile
37+
- name: Build the Docusaurus site
38+
run: yarn build
39+
spellcheck:
40+
runs-on: ubuntu-latest
41+
steps:
3842
- uses: actions/checkout@v4
3943
- uses: codespell-project/actions-codespell@master
4044
name: Check spelling

‎.github/workflows/production.yml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,8 @@
11
name: deploy-to-production
22

3+
permissions:
4+
contents: read
5+
36
on:
47
push:
58
branches:

‎blog-cse/2025-05-30-content.md‎

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
---
2+
title: May 30, 2025 - Content Release
3+
image: https://help.sumologic.com/img/sumo-square.png
4+
keywords:
5+
- log mappers
6+
- parsers
7+
- rules
8+
hide_table_of_contents: true
9+
---
10+
11+
import useBaseUrl from '@docusaurus/useBaseUrl';
12+
13+
This content release includes:
14+
- Rule updates.
15+
- New log parsers and mappers to support Akamai CPC and Contrast Security ADR.
16+
- New and updated log mappers for Azure Event Hub - Windows Defender logs, Cisco ISE, Microsoft Office 365, and Snowflake.
17+
- Modifications to existing parsers for Microsoft Azure JSON, Nginx Syslog, and Snowflake to support additional formats and events.
18+
19+
Changes are enumerated below.
20+
21+
### Rules
22+
- [Updated] MATCH-S00068 O365 - Users Password Changed
23+
- Updated entity selectors to include both `user_username` and `targetUser_username`
24+
- [Updated] MATCH-S00069 O365 - Users Password Reset
25+
- Updated entity selectors to include both `user_username` and `targetUser_username`
26+
27+
### Log Mappers
28+
- [New] Akamai CPC
29+
- [New] Azure Event Hub - Windows Defender Audit events
30+
- [New] Azure Event Hub - Windows Defender Audit file events
31+
- [New] Azure Event Hub - Windows Defender Authentication events
32+
- [New] Azure Event Hub - Windows Defender Email events
33+
- [New] Azure Event Hub - Windows Defender Endpoint Process events
34+
- [New] Azure Event Hub - Windows Defender Network events
35+
- [New] Contrast Security ADR Default Mapping
36+
- [New] Snowflake Query History
37+
- [New] Snowflake Session
38+
- [Updated] Azure Event Hub - Windows Defender Logs - DeviceAlertEvents
39+
- [Updated] Azure Event Hub - Windows Defender Logs and Azure Alert
40+
- [Updated] Cisco ISE Catch All
41+
- [Updated] Microsoft Office 365 Active Directory Authentication Events
42+
- [Updated] Snowflake Catch All
43+
- [Updated] Snowflake Login
44+
45+
### Parsers
46+
- [New] /Parsers/System/Akamai/Akamai CPC
47+
- [New] /Parsers/System/Contrast Security/Contrast ADR
48+
- [Updated] /Parsers/System/Cisco/Cisco ISE
49+
- [Updated] /Parsers/System/Microsoft/Microsoft Azure JSON
50+
- [Updated] /Parsers/System/Nginx/Nginx Syslog
51+
- [Updated] /Parsers/System/Microsoft/Office 365
52+
- [Updated] /Parsers/System/Snowflake/Snowflake
53+
- [Updated] /Parsers/System/Microsoft/Windows PowerShell-JSON
54+
- [Updated] /Parsers/System/Microsoft/Windows-JSON-Open Telemetry

‎blog-cse/2025-06-02-application.md‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
---
2+
title: June 2, 2025 - Application Update
3+
image: https://help.sumologic.com/img/sumo-square.png
4+
keywords:
5+
- outlier rules
6+
- first seen rules
7+
- baseline
8+
hide_table_of_contents: true
9+
---
10+
11+
import useBaseUrl from '@docusaurus/useBaseUrl';
12+
13+
### New method for building baselines
14+
15+
We're happy to announce that now when you create or update a first seen or outlier rule, the baseline starts building immediately using existing system data. Typically, the baseline is ready within minutes. You no longer need to wait days for a baseline learning period to complete before it becomes usable. This change enables you to gain insights faster and iterate on your first seen and outlier rules rapidly, reducing tuning time from weeks to minutes.
16+
17+
To learn more, see our information about baselines for [first seen rules](/docs/cse/rules/write-first-seen-rule/) and [outlier rules](/docs/cse/rules/write-outlier-rule/#baselines-for-outlier-rules).
18+
19+
:::note
20+
This change is rolling out across deployments incrementally and will be available on all deployments by June 12, 2025.
21+
:::

‎blog-service/2025-05-30-apps.md‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
---
2+
title: Apps, Solutions, and Collection Integrations - May Release
3+
image: https://help.sumologic.com/img/sumo-square.png
4+
keywords:
5+
- apps
6+
- may-release
7+
hide_table_of_contents: true
8+
---
9+
10+
import useBaseUrl from '@docusaurus/useBaseUrl';
11+
12+
### Enhancements
13+
14+
- **Classic Apps to Next-Gen Apps Migration**. [ActiveMQ](/docs/integrations/containers-orchestration/activemq/), [IIS 7/8](/docs/integrations/microsoft-azure/iis-7/), [Kafka](/docs/integrations/containers-orchestration/kafka/), [RabbitMQ](/docs/integrations/containers-orchestration/rabbitmq/), [Squid Proxy](/docs/integrations/web-servers/squid-proxy/), [Strimzi Kafka](/docs/integrations/containers-orchestration/strimzi-kafka/), and [Varnish](/docs/integrations/web-servers/varnish/).
15+
16+
- **Updated 13 Azure apps**. [Azure Application Gateway](/docs/integrations/microsoft-azure/azure-application-gateway/), [Azure App Service Plan](/docs/integrations/microsoft-azure/azure-app-service-plan/), [Azure API Management](/docs/integrations/microsoft-azure/azure-api-management/), [Azure Cache for Redis](/docs/integrations/microsoft-azure/azure-cache-for-redis/), [Azure Container Instances](/docs/integrations/microsoft-azure/azure-container-instances/), [Azure Cosmos DB](/docs/integrations/microsoft-azure/azure-cosmos-db/), [Azure Database for MySQL](/docs/integrations/microsoft-azure/azure-database-for-mysql/), [Azure Database for PostgreSQL](/docs/integrations/microsoft-azure/azure-database-for-postgresql/), [Azure Functions](/docs/integrations/microsoft-azure/azure-functions/), [Azure Kubernetes Service (AKS) - Control Plane](/docs/integrations/microsoft-azure/kubernetes/), [Azure Load Balancer](/docs/integrations/microsoft-azure/azure-load-balancer/), [Azure Virtual Machine](/docs/integrations/microsoft-azure/azure-virtual-machine/), and [Azure WebApps](/docs/integrations/microsoft-azure/web-apps/).
17+
18+
- **Updated 12 OpenTelemetry apps**. [ActiveMQ - OpenTelemetry](/docs/integrations/containers-orchestration/opentelemetry/activemq-opentelemetry/), [Apache Tomcat - OpenTelemetry](/docs/integrations/web-servers/opentelemetry/apache-tomcat-opentelemetry/), [Cassandra - OpenTelemetry](/docs/integrations/databases/opentelemetry/cassandra-opentelemetry/), [Elasticsearch - OpenTelemetry](/docs/integrations/databases/opentelemetry/elasticsearch-opentelemetry/), [JMX - OpenTelemetry](/docs/integrations/app-development/opentelemetry/jmx-opentelemetry/), [MongoDB - OpenTelemetry](/docs/integrations/databases/opentelemetry/mongodb-opentelemetry/), [MySQL - OpenTelemetry](/docs/integrations/databases/opentelemetry/mysql-opentelemetry/), [Oracle - OpenTelemetry](/docs/integrations/databases/opentelemetry/oracle-opentelemetry/), [PostgreSQL - OpenTelemetry](/docs/integrations/databases/opentelemetry/postgresql-opentelemetry/), [RabbitMQ - OpenTelemetry](/docs/integrations/containers-orchestration/opentelemetry/rabbitmq-opentelemetry/), [Redis - OpenTelemetry](/docs/integrations/databases/opentelemetry/redis-opentelemetry/), and [VMWare - OpenTelemetry](/docs/integrations/containers-orchestration/opentelemetry/vmware-opentelemetry/).
19+
20+
- **Updated AWS Lambda**. New use cases added for CloudTrail logs and CloudWatch metrics.
21+
22+
- **Source Template updates**. [Linux](/docs/send-data/opentelemetry-collector/remote-management/source-templates/linux/), [Mac](/docs/send-data/opentelemetry-collector/remote-management/source-templates/mac/), and [Windows](/docs/send-data/opentelemetry-collector/remote-management/source-templates/windows/).
23+
24+
- **Source Template bug fix**. [Apache](/docs/send-data/opentelemetry-collector/remote-management/source-templates/apache/), [Docker](/docs/send-data/opentelemetry-collector/remote-management/source-templates/docker/), [Kafka](/docs/send-data/opentelemetry-collector/remote-management/source-templates/kafka/), and [Nginx](/docs/send-data/opentelemetry-collector/remote-management/source-templates/nginx/).

0 commit comments

Comments
 (0)