You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md
+16-2Lines changed: 16 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -99,13 +99,12 @@ The left pane of the insight details page displays detailed information about th
99
99
1.**Actions.** The [insight actions](/docs/cse/administration/create-cse-actions#insight-actions) defined in your environment.
100
100
1.**Close Insight.** Use this option to close an insight. When you click this option, you’re prompted to select an insight resolution.
101
101
1.**Delete Icon.** Use this option to delete an insight. You’ll be prompted to confirm your choice.
102
+
1.**Summary**. Insight summary generated by AI.
102
103
1.**Status.** Current status of the insight.
103
104
1.**Assignee** and **Assign to me.** Shows the current assignee and allows you to assign yourself the insight.
104
105
1.**Entity.** The entity the insight fired on.
105
106
1.**Severity.** Severity of the insight. Mouse over it to see an icon you can click to change the insight severity.
106
107
1.**Global Confidence.** The [Global Confidence score](/docs/cse/records-signals-entities-insights/global-intelligence-security-insights/) for the insight, if available.
107
-
1.**Related Incidents and Triages**. Incidents and triages that are related to this insight.
108
-
1.**Create Incident | Add to Incident**. Create an incident for the insight, or add the insight to an existing incident.
109
108
1.**Signal Data.** The number of signals in the insight.
110
109
1.**Event Time.** The event time for the of the last signal in the insight.
111
110
1.**Detection Time.** The time between when the first event happened (when the first record in the insight occurred) and when the insight was generated. (This differs from "dwell time", which is the time between when the first record and the last record occurred in an insight.)
@@ -114,6 +113,21 @@ The left pane of the insight details page displays detailed information about th
114
113
1.**Comments.** Displays any comments that have been made on the insight, and a field for adding a comment.
115
114
1.**Show Comments/History.** The controls allow you to switch between viewing the insight's comments and history.
116
115
116
+
117
+
### Insight summary (beta)
118
+
119
+
The insight **Summary** pane provides a concise, actionable summary of threat incidents based on triggered signals using AI. It consolidates key details to facilitate quick understanding and response by security teams.
120
+
121
+
The summary is generated only when the insight is created. The summary is not regenerated if signals are added or removed on the insight.
The insight summary is in [beta](/docs/manage/manage-subscription/beta-opt-in/).
127
+
128
+
Help us refine the tool by using the thumbs-up or thumbs-down buttons to provide feedback on the effectiveness of the summary presented.
129
+
:::
130
+
117
131
### Signal visualization area
118
132
119
133
At the top of the insight details page, you’ll see a signal timeline that visualizes the insight’s attached signals, which are the signals that caused the insight to be created, and any signals that have been manually added to the insight.
0 commit comments