Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions docs/alerts/monitors/alert-response.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,20 @@ import Iframe from 'react-iframe';

Learn how to use alert response.


<Iframe url="https://fast.wistia.net/embed/iframe/elkucyy4ap?web_component=true&seo=true&videoFoam=false"
width="854px"
height="480px"
title="Micro Lesson: Using Alert Response Video"
id="wistiaVideo"
className="video-container"
display="initial"
position="relative"
allow="autoplay; fullscreen"
allowfullscreen
/>

<!-- old
<Iframe url="https://www.youtube.com/embed/3FHomBuFyV8?rel=0"
width="854px"
height="480px"
Expand All @@ -30,6 +44,7 @@ Learn how to use alert response.
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>
-->

:::

Expand Down
32 changes: 31 additions & 1 deletion docs/alerts/monitors/create-monitor.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@ description: Learn how to create a Sumo Logic monitor.
---

import useBaseUrl from '@docusaurus/useBaseUrl';
import Iframe from 'react-iframe';

This guide will walk you through the steps of creating a monitor in Sumo Logic, from setting up trigger conditions to configuring advanced settings, notifications, and playbooks.

Expand Down Expand Up @@ -87,7 +88,7 @@ Set specific threshold conditions for well-defined KPIs with constant thresholds

#### Anomaly

Leverage machine learning to identify unusual behavior and suspicious patterns by establishing baselines for normal activity. This [*AI-driven alerting*](https://www.youtube.com/watch?v=nMRoYb1YCfg) system uses historical data to minimize false positives and alerts you to deviations.
Leverage machine learning to identify unusual behavior and suspicious patterns by establishing baselines for normal activity. This *AI-driven alerting* system uses historical data to minimize false positives and alerts you to deviations.

* **Model-driven detection**. Machine learning models create accurate baselines, eliminating guesswork and noise.
* **AutoML**. The system self-tunes with seasonality detection, minimizing user intervention and adjusting for recurring patterns to reduce false positives.
Expand All @@ -96,6 +97,35 @@ Leverage machine learning to identify unusual behavior and suspicious patterns b
* **Auto-diagnosis and recovery**. The Automation Service handles diagnosis and resolution, closing the loop from alert to recovery.
* **Customizable detection**. Use advanced rules like "Cluster anomalies" to detect multiple data points exceeding thresholds within a set timeframe.

:::sumo Micro Lesson
Learn about AI-driven alerting.

<Iframe url="https://fast.wistia.net/embed/iframe/8z9b2zqtc3?web_component=true&seo=true&videoFoam=false"
width="854px"
height="480px"
title="Micro Lesson: AI-driven Alerting Video"
id="wistiaVideo"
className="video-container"
display="initial"
position="relative"
allow="autoplay; fullscreen"
allowfullscreen
/>

<!-- old
<Iframe url="https://www.youtube.com/embed/nMRoYb1YCfg?rel=0"
width="854px"
height="480px"
id="myId"
className="video-container"
display="initial"
position="relative"
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>
-->
:::

**Use Outlier**

If you want to trigger alerts on outlier direction rather than anomaly detection, select **Anomaly** and enable **Use Outlier**. This detects unusual changes or spikes in a time series of a key indicator. Use this detection method when you are alerting on KPIs that don't have well-defined constant thresholds for what's good and bad. You want the monitor to automatically detect and alert on unusual changes or spikes on the alerting query. For example, application KPIs like page request, throughput, and latency. <br/><img src={useBaseUrl('img/alerts/monitors/monitor-detector-types-for-anomaly.png')} alt="Screenshot of the Monitor Type and Detection Method options in Sumo Logic's 'New Monitor' setup page. Logs is selected as the Monitor Type, and Anomaly is selected as the Detection Method. There is an option to use Outlier detection, which is currently toggled off." width="300"/>
Expand Down
38 changes: 26 additions & 12 deletions docs/alerts/monitors/use-playbooks-with-monitors.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@ description: Learn how to use Automation Service playbooks with monitors.
---

import useBaseUrl from '@docusaurus/useBaseUrl';
import Iframe from 'react-iframe';

This article describes how to configure automated playbooks in monitors. An *automated playbook* is a [playbook in the Automation Service](/docs/platform-services/automation-service/automation-service-playbooks/), and is a predefined set of actions and conditional statements that run in an automated workflow to respond to an event. For example, suppose that a monitor detects suspicious behavior that could indicate a security problem. When the monitor sends the alert, it could also run an automated playbook to respond to the event.

Expand Down Expand Up @@ -83,21 +84,34 @@ An anomaly monitor is triggered when unusual conditions are detected. Anomaly mo
Weekly seasonality detection is turned off by default to optimize performance. [Contact Sumo Logic Customer Support](https://support.sumologic.com/support/s/contactsupport) to activate it for specific monitors. (*Weekly seasonality detection* is the optimization of baseline calculations to account for the variations of data flow that can occur in a work week.)
:::

:::sumo Micro Lesson
Watch this micro lesson to learn about anomaly monitors.

<Iframe url="https://fast.wistia.net/embed/iframe/8z9b2zqtc3?web_component=true&seo=true&videoFoam=false"
width="854px"
height="480px"
title="Micro Lesson: AI-driven Alerting Video"
id="wistiaVideo"
className="video-container"
display="initial"
position="relative"
allow="autoplay; fullscreen"
allowfullscreen
/>

<!-- old
<Iframe url="https://www.youtube.com/embed/nMRoYb1YCfg?rel=0"
width="854px"
height="480px"
id="myId"
className="video-container"
display="initial"
position="relative"
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>

import Iframe from 'react-iframe';

width="854px"
height="480px"
id="myId"
className="video-container"
display="initial"
position="relative"
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>
-->
:::

To create an anomaly monitor that runs an automated playbook in response to an alert:

Expand Down
15 changes: 14 additions & 1 deletion docs/apm/real-user-monitoring/configure-data-collection.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,19 @@ To collect [traces](/docs/apm/traces) and RUM metrics from a browser, you'll fir
:::sumo Micro Lesson
Using the RUM HTTP Traces App for Manual Testing.

<Iframe url="https://fast.wistia.net/embed/iframe/qmxk5wxqu5?web_component=true&seo=true&videoFoam=false"
width="854px"
height="480px"
title="Using the RUM HTTP Traces App for Manual Testing Video"
id="wistiaVideo"
className="video-container"
display="initial"
position="relative"
allow="autoplay; fullscreen"
allowfullscreen
/>

<!-- old
<Iframe url="https://www.youtube.com/embed/CduT1sqSPmE?rel=0"
width="854px"
height="480px"
Expand All @@ -24,7 +37,7 @@ Using the RUM HTTP Traces App for Manual Testing.
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>

-->
:::

## Prerequisites
Expand Down
14 changes: 14 additions & 0 deletions docs/apm/real-user-monitoring/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,19 @@ All data collected is compatible with OpenTelemetry and doesn't use proprietary
:::sumo Micro Lesson
See Real User Monitoring in action.

<Iframe url="https://fast.wistia.net/embed/iframe/jfptjgwql1?web_component=true&seo=true&videoFoam=false"
width="854px"
height="480px"
title="Micro Lesson: Real User Monitoring (RUM) 2.0 Video"
id="wistiaVideo"
className="video-container"
display="initial"
position="relative"
allow="autoplay; fullscreen"
allowfullscreen
/>

<!-- old
<Iframe url="https://www.youtube.com/embed/3EMl3jyoZjA?rel=0"
width="854px"
height="480px"
Expand All @@ -36,6 +49,7 @@ See Real User Monitoring in action.
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>
-->

:::

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,20 @@ Perhaps the most convenient way to start capturing telemetry from Java (or, gene
import Iframe from 'react-iframe';

:::sumo Micro Lesson
Tutorial: Auto-instrumentation of a Java app by OpenTelemetry for K8s Environment.

<Iframe url="https://fast.wistia.net/embed/iframe/p46o4kivj4?web_component=true&seo=true&videoFoam=false"
width="854px"
height="480px"
title="Tutorial: Auto-instrumentation of a Java app by OpenTelemetry for K8s Environment Video"
id="wistiaVideo"
className="video-container"
display="initial"
position="relative"
allow="autoplay; fullscreen"
allowfullscreen
/>

<!-- old
<Iframe url="https://www.youtube.com/embed/P_74rhI1M30?rel=0"
width="854px"
height="480px"
Expand All @@ -22,6 +34,7 @@ Tutorial: Auto-instrumentation of a Java app by OpenTelemetry for K8s Environmen
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>
-->

:::

Expand Down
20 changes: 18 additions & 2 deletions docs/apm/traces/quickstart.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,12 +21,26 @@ You can access Traces if your Sumo Logic service package has been upgraded to in
[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). To access Traces, go to the **Home** screen and select **Traces**.

[**New UI**](/docs/get-started/sumo-logic-ui/). To access Traces, in the main Sumo Logic menu, select **Observability**, and then under **Application Monitoring**, select **Transaction Traces**. You can also click the **Go To...** menu at the top of the screen and select **Transaction Traces**.


## Micro Lesson
## Micro lesson

:::sumo Micro Lesson

This micro lesson can help you get started with Tracing.

<Iframe url="https://fast.wistia.net/embed/iframe/zcg3x7r420?web_component=true&seo=true&videoFoam=false"
width="854px"
height="480px"
title="Micro Lesson: Introduction to Tracing Video"
id="wistiaVideo"
className="video-container"
display="initial"
position="relative"
allow="autoplay; fullscreen"
allowfullscreen
/>

<!-- old
<Iframe url="https://www.youtube.com/embed/BTqufvTJ4vE"
width="854px"
height="480px"
Expand All @@ -37,6 +51,8 @@ This micro lesson can help you get started with Tracing.
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>
-->
:::

Trace data is visualized through filtered trace lists and icicle charts allowing you to find and troubleshoot faulty transactions easily. See how easy it is to [view and investigate traces](view-and-investigate-traces.md).

Expand Down
14 changes: 14 additions & 0 deletions docs/apm/traces/spans.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,19 @@ import Iframe from 'react-iframe';

This micro lesson provides an overview of Span Analytics, and describes the term Span in the distributed tracing and the benefits of Span Analytics. It also explains how to perform Span Analytics in Sumo Logic UI.

<Iframe url="https://fast.wistia.net/embed/iframe/t2q0n8etid?web_component=true&seo=true&videoFoam=false"
width="854px"
height="480px"
title="Micro Lesson: Span Analytics Video"
id="wistiaVideo"
className="video-container"
display="initial"
position="relative"
allow="autoplay; fullscreen"
allowfullscreen
/>

<!-- old
<Iframe url="https://www.youtube.com/embed/2cp_0pmzD-A"
width="854px"
height="480px"
Expand All @@ -41,6 +54,7 @@ This micro lesson provides an overview of Span Analytics, and describes the term
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>
-->

:::

Expand Down
34 changes: 34 additions & 0 deletions docs/cloud-soar/incidents-triage.md
Original file line number Diff line number Diff line change
Expand Up @@ -28,8 +28,22 @@ Incidents are events that require investigation and remediation. Incidents are a

[**New UI**](/docs/cloud-soar/overview#new-ui). To access incidents, in the main Sumo Logic menu select **Cloud SOAR > Incidents**. You can also click the **Go To...** menu at the top of the screen and select **Incidents**.

:::sumo Micro Lesson
Watch this micro lesson to learn more about incidents in Cloud SOAR.

<Iframe url="https://fast.wistia.net/embed/iframe/faxotvoq3j?web_component=true&seo=true&videoFoam=false"
width="854px"
height="480px"
title="Micro Lesson: Cloud SOAR Incidents Video"
id="wistiaVideo"
className="video-container"
display="initial"
position="relative"
allow="autoplay; fullscreen"
allowfullscreen
/>

<!-- old
<Iframe url="https://www.youtube.com/embed/GDWFGJ8JOqA?rel=0"
width="854px"
height="480px"
Expand All @@ -40,7 +54,9 @@ Watch this micro lesson to learn more about incidents in Cloud SOAR.
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>
-->

:::
### Filter incidents

The **Incidents** screen lists all Cloud SOAR incidents. Clicking on any of the incident IDs will open the incident. You can configure what incidents are displayed by creating queries against available incident data and saving them as incident filters.
Expand Down Expand Up @@ -317,8 +333,23 @@ To explore entities:

Cloud SOAR's **Dashboards** section highlights the most important pieces of data to the user or investigator who is logged into the platform. This data is presented through the use of multiple widgets that you can add, remove, and customize to include all data relevant to your job functions and duties.

:::sumo Micro Lesson

Watch the following micro lesson to learn about dashboards.

<Iframe url="https://fast.wistia.net/embed/iframe/gqclutn3d1?web_component=true&seo=true&videoFoam=false"
width="854px"
height="480px"
title="Micro Lesson: Cloud SOAR Dashboards &amp; KPI Reports Video"
id="wistiaVideo"
className="video-container"
display="initial"
position="relative"
allow="autoplay; fullscreen"
allowfullscreen
/>

<!-- old
<Iframe url="https://www.youtube.com/embed/NRdtAvxhuOY?rel=0"
width="854px"
height="480px"
Expand All @@ -329,6 +360,9 @@ Watch the following micro lesson to learn about dashboards.
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>
-->

:::

### Create a dashboard

Expand Down
14 changes: 0 additions & 14 deletions docs/cloud-soar/legacy/legacy-global-functions-menu.md
Original file line number Diff line number Diff line change
Expand Up @@ -41,20 +41,6 @@ CBR solves new problems by adapting previously successful solutions to similar p

ARK assists operators during investigations in two main areas: Automatically suggesting/prompting next actions/tasks in Playbooks (until version 5) and Correlation/ Deduplication of similar threats into 1 unique incident.

Watch this micro lesson to learn more about ARK.

<Iframe url="https://www.youtube.com/embed/mUpaTFtKAMM?rel=0"
width="854px"
height="480px"
id="myId"
className="video-container"
display="initial"
position="relative"
allow="accelerometer; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen
/>


#### Enable ARK

To enable ARK, click the cog icon, then **Settings** > **ARK** and make sure you have it set to **ON**.
Expand Down
Loading
Loading