Normalization and Custom Types

Author: jpipkin1

docs/cse/records-signals-entities-insights/configure-entity-lookup-table.md

@@ -72,8 +72,8 @@ For instructions, see [Create a Lookup Table](/docs/search/lookup-tables/create-
 After you've [created your Entity Lookup Table](/docs/search/lookup-tables/create-lookup-table/) in the Sumo Logic Library, you can configure it in Cloud SIEM.
 
 1. [**Classic UI**](/docs/cse/introduction-to-cloud-siem/#classic-ui). In the top menu select **Configuration**, and then under **Entities** select **Normalization**. <br/>[**New UI**](/docs/cse/introduction-to-cloud-siem/#new-ui). In the top menu select **Configuration**, and then under **Cloud SIEM Entities** select **Normalization**. You can also click the **Go To...** menu at the top of the screen and select **Normalization**.  
-1. On the **Entity Normalization** page, click **Lookup Tables**.
-1. Click **Create** on the **Lookup Tables** tab.
+1. On the **Normalization** tab, click **Lookup Tables**.
+1. Select the lookup table.
 1. The **Existing Lookup Table** popup appears.<br/><img src={useBaseUrl('img/cse/existing-lookup-table.png')} alt="Existing Lookup Table dialog" style={{border: '1px solid gray'}} width="600"/>  
 1. **Type**. Choose the type of normalization you want to set up.
    * **Host ID to Normalized Hostname**. Maps unique host IDs to recognizable hostnames.

docs/cse/records-signals-entities-insights/create-custom-entity-type.md

@@ -22,12 +22,12 @@ Just as for Entities of built-in types listed above—IP addresses, MAC addresse
 To create a custom Entity type:
 
 1. [**Classic UI**](/docs/cse/introduction-to-cloud-siem/#classic-ui). In the top menu select **Configuration**, and then under **Entities** select **Custom Types**. <br/>[**New UI**](/docs/cse/introduction-to-cloud-siem/#new-ui). In the top menu select **Configuration**, and then under **Cloud SIEM Entities** select **Custom Types**. You can also click the **Go To...** menu at the top of the screen and select **Custom Types**.  
-1. Click **Create** on the **Custom Entity Types** page. 
-2. The **Create Custom Entity Type** popup appears. <br/><img src={useBaseUrl('img/cse/create-custom-entity-type.png')} alt="Create custom Entity type" style={{border: '1px solid gray'}} width="500"/>
+1. On the **Custom Entity Types** tab click **+ Add Custom Type**. 
+2. The **Add Custom Entity Type** popup appears. <br/><img src={useBaseUrl('img/cse/create-custom-entity-type.png')} alt="Create custom Entity type" style={{border: '1px solid gray'}} width="400"/>
 3. **Name**. Enter a meaningful name for the custom Entity type. The name can include alphanumeric characters and spaces. The name you enter will appear as the **Name** of the custom Entity type on the **Custom Entity Type** page. 
 4. **Identifier**. Enter a unique identifier for the custom Entity type. The Identifier can include lowercase alphanumeric characters. The Identifier of the Entity type doesn’t appear in the Cloud SIEM UI, but is used by the Cloud SIEM backend.
     :::note
     The Entity type Identifier cannot be changed once you’ve saved it.
     :::
 5. **Fields**. Use the dropdown list to select the schema attribute or attributes you want to associate with the custom Entity type.
-6. Click **Create**.
+6. Click **Save**.

docs/cse/schema/username-and-hostname-normalization.md

@@ -67,7 +67,7 @@ If no name normalization configuration exists, the name attribute will consist o
 
 Following is an example configuration:
 
-<img src={useBaseUrl('img/cse/Configuration.png')} alt="Configuration dialog" style={{border: '1px solid gray'}} width="800"/>
+<img src={useBaseUrl('img/cse/Configuration.png')} alt="Configuration dialog" style={{border: '1px solid gray'}} width="600"/>
 
 ### Warnings and issues