Skip to content
15 changes: 15 additions & 0 deletions blog-cse/2025-09-11-application.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
---
title: September 11, 2025 - Application Update
image: https://help.sumologic.com/img/reuse/rss-image.jpg
keywords:
- insights
hide_table_of_contents: true
---

import useBaseUrl from '@docusaurus/useBaseUrl';

### Insight summary

We’re excited to announce the new insights summary pane, an AI-generated summary for each insight that describes the threat incidents that led to its creation. This helps security teams understand incidents faster and accelerate response time. [Learn more](/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui/#insight-summary).

<img src={useBaseUrl('img/cse/insight-summary-pane.png')} alt="Insight summary" style={{border: '1px solid gray'}} width="300"/>
1 change: 1 addition & 0 deletions cid-redirects.json
Original file line number Diff line number Diff line change
Expand Up @@ -4296,6 +4296,7 @@
"/docs/cse/administration/threat-intelligence": "/docs/security/threat-intelligence",
"/docs/cse/records": "/docs/cse/records-signals-entities-insights",
"/docs/cse/records-signals-entities-insights/about-cse-insight-ui": "/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui",
"/docs/cse/get-started-with-cloud-siem/insight-summary/": "/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui",
"/docs/cse/records-signals-entities-insights/cse-heads-up-display": "/docs/cse/get-started-with-cloud-siem/cse-heads-up-display",
"/docs/cse/records-signals-entities-insights/insight-generation-process": "/docs/cse/get-started-with-cloud-siem/insight-generation-process",
"/docs/cse/get-started-with-cloud-siem/introduction-to-cloud-siem": "/docs/cse/get-started-with-cloud-siem",
Expand Down
16 changes: 14 additions & 2 deletions docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md
Original file line number Diff line number Diff line change
Expand Up @@ -99,13 +99,12 @@ The left pane of the insight details page displays detailed information about th
1. **Actions.** The [insight actions](/docs/cse/administration/create-cse-actions#insight-actions) defined in your environment.
1. **Close Insight.** Use this option to close an insight. When you click this option, you’re prompted to select an insight resolution.
1. **Delete Icon.** Use this option to delete an insight. You’ll be prompted to confirm your choice.
1. **Summary**. [Insight summary](#insight-summary) generated by AI.
1. **Status.** Current status of the insight.
1. **Assignee** and **Assign to me.** Shows the current assignee and allows you to assign yourself the insight.
1. **Entity.** The entity the insight fired on.
1. **Severity.** Severity of the insight. Mouse over it to see an icon you can click to change the insight severity.
1. **Global Confidence.** The [Global Confidence score](/docs/cse/records-signals-entities-insights/global-intelligence-security-insights/) for the insight, if available.
1. **Related Incidents and Triages**. Incidents and triages that are related to this insight.
1. **Create Incident | Add to Incident**. Create an incident for the insight, or add the insight to an existing incident.
1. **Signal Data.** The number of signals in the insight.
1. **Event Time.** The event time for the of the last signal in the insight.
1. **Detection Time.** The time between when the first event happened (when the first record in the insight occurred) and when the insight was generated. (This differs from "dwell time", which is the time between when the first record and the last record occurred in an insight.)
Expand All @@ -114,6 +113,19 @@ The left pane of the insight details page displays detailed information about th
1. **Comments.** Displays any comments that have been made on the insight, and a field for adding a comment.
1. **Show Comments/History.** The controls allow you to switch between viewing the insight's comments and history.


### Insight summary

The insight **Summary** pane provides a concise, actionable summary of threat incidents based on triggered signals using AI. It consolidates key details to facilitate quick understanding and response by security teams.

The summary is generated only when the insight is created. The summary is not regenerated if signals are added or removed on the insight.

<img src={useBaseUrl('img/cse/insight-summary-pane.png')} alt="Insight summary" style={{border: '1px solid gray'}} width="300"/>

:::note
Help us refine the tool by using the thumbs-up or thumbs-down buttons to provide feedback on the effectiveness of the summary presented.
:::

### Signal visualization area

At the top of the insight details page, you’ll see a signal timeline that visualizes the insight’s attached signals, which are the signals that caused the insight to be created, and any signals that have been manually added to the insight.
Expand Down
27 changes: 0 additions & 27 deletions docs/cse/get-started-with-cloud-siem/insight-summary.md

This file was deleted.

Binary file modified static/img/cse/insight-details.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified static/img/cse/insight-summary-pane.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.