Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
8 changes: 4 additions & 4 deletions docs/alerts/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,25 +21,25 @@ import SumoAcademy from '../reuse/sumo-logic-academy.md';
<div className="box-wrapper" markdown="1">
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/difference-from-scheduled-searches')}><img src={useBaseUrl('img/icons/alerts.png')} alt="icon" width="40"/><h4>Monitors vs. Scheduled Searches</h4></a>
<a href={useBaseUrl('docs/alerts/difference-from-scheduled-searches')}><img src={useBaseUrl('img/icons/alerts.png')} alt="Alerts icon" width="40"/><h4>Monitors vs. Scheduled Searches</h4></a>
<p>Learn about the feature differences between Monitors and Scheduled Searches.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/monitors')}><img src={useBaseUrl('img/icons/alerts.png')} alt="icon" width="40"/><h4>Monitors</h4></a>
<a href={useBaseUrl('docs/alerts/monitors')}><img src={useBaseUrl('img/icons/alerts.png')} alt="Alerts icon" width="40"/><h4>Monitors</h4></a>
<p>Configure alerting policies notify you about critical changes or issues affecting your production applications.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/scheduled-searches')}><img src={useBaseUrl('img/icons/alerts.png')} alt="icon" width="40"/><h4>Scheduled Searches</h4></a>
<a href={useBaseUrl('docs/alerts/scheduled-searches')}><img src={useBaseUrl('img/icons/alerts.png')} alt="Alerts icon" width="40"/><h4>Scheduled Searches</h4></a>
<p>Create saved searches that are executed continuously on a schedule you set, monitoring your stack.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/webhook-connections')}><img src={useBaseUrl('img/icons/alerts.png')} alt="icon" width="40"/><h4>Webhook Connections</h4></a>
<a href={useBaseUrl('docs/alerts/webhook-connections')}><img src={useBaseUrl('img/icons/alerts.png')} alt="Alerts icon" width="40"/><h4>Webhook Connections</h4></a>
<p>Webhook connections send alerts to third-party applications.</p>
</div>
</div>
Expand Down
22 changes: 11 additions & 11 deletions docs/alerts/monitors/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,67 +14,67 @@ In this section, we'll introduce the following concepts:
<div className="box-wrapper" markdown="1">
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/monitors/overview')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Overview</h4></a>
<a href={useBaseUrl('docs/alerts/monitors/overview')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="Monitor and Visualize icon" width="40"/><h4>Overview</h4></a>
<p>Set up monitors to continuously query your logs or metrics and send notifications when specific events occur.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/monitors/create-monitor')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Create a New Monitor</h4></a>
<a href={useBaseUrl('docs/alerts/monitors/create-monitor')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="Monitor and Visualize icon" width="40"/><h4>Create a New Monitor</h4></a>
<p>Learn how to create a monitor.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/monitors/settings')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Monitor Settings</h4></a>
<a href={useBaseUrl('docs/alerts/monitors/settings')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="Monitor and Visualize icon" width="40"/><h4>Monitor Settings</h4></a>
<p>Learn how to view, create, manage, and organize Monitors.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/monitors/monitor-faq')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Monitors FAQ</h4></a>
<a href={useBaseUrl('docs/alerts/monitors/monitor-faq')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="Monitor and Visualize icon" width="40"/><h4>Monitors FAQ</h4></a>
<p>This topic lists the common FAQs regarding Monitors.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/monitors/alert-variables')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Variables</h4></a>
<a href={useBaseUrl('docs/alerts/monitors/alert-variables')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="Monitor and Visualize icon" width="40"/><h4>Alert Variables</h4></a>
<p>Use Alert Variables as parameters to customize the JSON payload object of your alert notifications.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/monitors/alert-response')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Response</h4></a>
<a href={useBaseUrl('docs/alerts/monitors/alert-response')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="Monitor and Visualize icon" width="40"/><h4>Alert Response</h4></a>
<p>Get contextual insights about triggered alerts to minimize the time needed to investigate and resolve application failures.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/monitors/alert-response-faq')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Response FAQ</h4></a>
<a href={useBaseUrl('docs/alerts/monitors/alert-response-faq')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="Monitor and Visualize icon" width="40"/><h4>Alert Response FAQ</h4></a>
<p>This topic lists the common FAQs regarding Alert Response.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/monitors/alert-grouping')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Alert Grouping</h4></a>
<a href={useBaseUrl('docs/alerts/monitors/alert-grouping')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="Monitor and Visualize icon" width="40"/><h4>Alert Grouping</h4></a>
<p>Customize how your alerts are generated from monitors by specifying a grouping condition based on specific fields.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/monitors/muting-schedules')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Muting Schedules</h4></a>
<a href={useBaseUrl('docs/alerts/monitors/muting-schedules')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="Monitor and Visualize icon" width="40"/><h4>Muting Schedules</h4></a>
<p>Pause alert notifications from monitors according to the schedule that you define.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/manage/ingestion-volume/monitor-ingestion-receive-alerts')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Monitor Log Ingestion and Alerts</h4></a>
<a href={useBaseUrl('docs/manage/ingestion-volume/monitor-ingestion-receive-alerts')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="Monitor and Visualize icon" width="40"/><h4>Monitor Log Ingestion and Alerts</h4></a>
<p>Add Scheduled Searches that monitor log ingestion and send alerts.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/monitors/use-playbooks-with-monitors')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="icon" width="40"/><h4>Automated Playbooks in Monitors</h4></a>
<a href={useBaseUrl('docs/alerts/monitors/use-playbooks-with-monitors')}><img src={useBaseUrl('img/icons/operations/monitor-and-visualize.png')} alt="Monitor and Visualize icon" width="40"/><h4>Automated Playbooks in Monitors</h4></a>
<p>Learn how to use Automation Service playbooks with monitors.</p>
</div>
</div>
Expand Down
14 changes: 7 additions & 7 deletions docs/alerts/scheduled-searches/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,43 +11,43 @@ A _Scheduled Search_ is a standard [Log Search](/docs/search) that you save and
<div className="box-wrapper">
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/scheduled-searches/schedule-search')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="icon" width="40"/><h4>Create a Scheduled Search</h4></a>
<a href={useBaseUrl('docs/alerts/scheduled-searches/schedule-search')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="Calendar icon" width="40"/><h4>Create a Scheduled Search</h4></a>
<p>Learn how to add alerts and schedule search to run it at a regular scheduled time.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/scheduled-searches/create-email-alert')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="icon" width="40"/><h4>Create a Scheduled Search Email Alert</h4></a>
<a href={useBaseUrl('docs/alerts/scheduled-searches/create-email-alert')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="Calendar icon" width="40"/><h4>Create a Scheduled Search Email Alert</h4></a>
<p>Learn how to create a Scheduled Search email alert.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/scheduled-searches/edit-cancel')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="icon" width="40"/><h4>Edit or Cancel a Scheduled Search</h4></a>
<a href={useBaseUrl('docs/alerts/scheduled-searches/edit-cancel')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="Calendar icon" width="40"/><h4>Edit or Cancel a Scheduled Search</h4></a>
<p>Learn how to edit or cancel a Scheduled Search at any time.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/scheduled-searches/save-to-index')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="icon" width="40"/><h4>Save to Index</h4></a>
<a href={useBaseUrl('docs/alerts/scheduled-searches/save-to-index')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="Calendar icon" width="40"/><h4>Save to Index</h4></a>
<p>Learn how to save the results to an Index after creating a Scheduled Search email alert.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/scheduled-searches/save-to-lookup')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="icon" width="40"/><h4>Save to Lookup</h4></a>
<a href={useBaseUrl('docs/alerts/scheduled-searches/save-to-lookup')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="Calendar icon" width="40"/><h4>Save to Lookup</h4></a>
<p>Learn how to save the results of a Scheduled Search to a Lookup Table.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/scheduled-searches/generate-cse-signals')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="icon" width="40"/><h4>Generate Cloud SIEM Signals with a Scheduled Search</h4></a>
<a href={useBaseUrl('docs/alerts/scheduled-searches/generate-cse-signals')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="Calendar icon" width="40"/><h4>Generate Cloud SIEM Signals with a Scheduled Search</h4></a>
<p>Learn how to create a Scheduled Search that will trigger a Cloud SIEM Signal.</p>
</div>
</div>
<div className="box smallbox card">
<div className="container">
<a href={useBaseUrl('docs/alerts/scheduled-searches/faq')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="icon" width="40"/><h4>FAQ</h4></a>
<a href={useBaseUrl('docs/alerts/scheduled-searches/faq')}><img src={useBaseUrl('img/icons/general/calendar.png')} alt="Calendar icon" width="40"/><h4>FAQ</h4></a>
<p>Review frequently asked questions about Scheduled Searches and troubleshooting tips.</p>
</div>
</div>
Expand Down
6 changes: 3 additions & 3 deletions docs/alerts/webhook-connections/aws-lambda.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ description: You can trigger an AWS Lambda function directly from a Sumo Logic a

import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('img/connection-and-integration/aws-lambda.svg')} alt="Thumbnail icon" width="50"/>
<img src={useBaseUrl('img/connection-and-integration/aws-lambda.svg')} alt="AWS Lambda icon" width="50"/>

You can trigger an AWS Lambda function directly from a Monitor or Scheduled Search by configuring a webhook connection. You can use the Webhook Connection as the Connection Type in a [Monitor](/docs/alerts/monitors) or the Alert Type in a [Scheduled Search](schedule-searches-webhook-connections.md).

Expand Down Expand Up @@ -71,7 +71,7 @@ Configure the webhook connection to trigger the AWS Lambda function.

1. [**New UI**](/docs/get-started/sumo-logic-ui). In the main Sumo Logic menu select **Monitoring > Connections**. You can also click the **Go To...** menu at the top of the screen and select **Connections**. <br/>[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Manage Data > Monitoring > Connections**.
1. On the **Connections** page, click **+ Add**.
1. For **Connection Type**, select **AWS Lambda** from the dropdown.<br/><img src={useBaseUrl('img/connection-and-integration/aws-lambda-dropdown.png')} alt="Thumbnail icon" style={{border: '1px solid gray'}} width="500" />
1. For **Connection Type**, select **AWS Lambda** from the dropdown.<br/><img src={useBaseUrl('img/connection-and-integration/aws-lambda-dropdown.png')} alt="AWS Lambda dropdown menu" style={{border: '1px solid gray'}} width="500" />
1. In the **Connection Settings** dialog, enter:
* **Name**. Enter a name for the connection.
* (Optional) **Description**. Enter a description for the connection.
Expand All @@ -82,7 +82,7 @@ Configure the webhook connection to trigger the AWS Lambda function.
* For Lambda Function URL, enter **lambda** as the service name.
* For API Gateway, enter **execute-api** as the service name.
* (Optional) **Custom Headers**. Enter up to five comma separated key-value pairs.
<img src={useBaseUrl('img/connection-and-integration/create-new-connection-aws-lambda.png')} alt="Thumbnail icon" style={{border: '1px solid gray'}} width="500" />
<img src={useBaseUrl('img/connection-and-integration/create-new-connection-aws-lambda.png')} alt="Create New Connection AWS Lambda icon" style={{border: '1px solid gray'}} width="500" />
1. **Alert Payload**. Under Alert Payload, which allows you to customize the alert notification, enter a JSON object accepted by your Lambda function. For details on variables that can be used as parameters within your JSON object, see [Webhook Payload Variables](set-up-webhook-connections.md). 
1. **Recovery Payload.** Under Recovery Payload, which allows you to customize the recovery notification, enter a JSON object accepted by your Lambda function. 
1. Click **Test Alert** or **Test Recovery** to test the connection. If the connection is made to your Lambda function successfully, you will see a `200 OK` response message.
Expand Down
6 changes: 3 additions & 3 deletions docs/alerts/webhook-connections/cloud-soar.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ description: Create incidents in Cloud SOAR from Monitor and Scheduled Search al

import useBaseUrl from '@docusaurus/useBaseUrl';

<img src={useBaseUrl('img/icons/security/SOC.png')} alt="icon" width="50"/>
<img src={useBaseUrl('img/icons/security/SOC.png')} alt="SOC icon" width="50"/>

[Cloud SOAR](/docs/cloud-soar) can receive alerts from Sumo Logic Monitors and Scheduled Searches to create Incidents. First, you'll need to create a Cloud SOAR connection. Then you can use the connection as the Connection Type in a [Monitor](/docs/alerts/monitors) or the Alert Type in a [Scheduled Search](schedule-searches-webhook-connections.md).

Expand All @@ -20,15 +20,15 @@ You can configure a webhook connection to allow you to send an alert from a sche

1. [**New UI**](/docs/get-started/sumo-logic-ui). In the main Sumo Logic menu select **Monitoring > Connections**. You can also click the **Go To...** menu at the top of the screen and select **Connections**. <br/>[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Manage Data > Monitoring > Connections**.
1. On the **Connections** page, click **+ Add**.
1. For **Connection Type**, select **Cloud SOAR** from the dropdown.<br/><img src={useBaseUrl('img/connection-and-integration/cloud-soar-dropdown.png')} alt="Thumbnail icon" style={{border: '1px solid gray'}} width="500" />
1. For **Connection Type**, select **Cloud SOAR** from the dropdown.<br/><img src={useBaseUrl('img/connection-and-integration/cloud-soar-dropdown.png')} alt="Cloud SOAR dropdown menu" style={{border: '1px solid gray'}} width="500" />
1. In the **Connection Settings** dialog, enter:
* **Name**. Enter a name for the connection.
* (Optional) **Description**. Enter a description for the connection.
* **URL**. The URL field displays your [Sumo Logic API endpoint](/docs/api/about-apis/getting-started#sumo-logic-endpoints-by-deployment-and-firewall-security) followed by `/csoar/v3/incidents/`. For example, `https://api.us2.sumologic.com/api/csoar/v3/incidents/`.
* **Authorization Header**. Enter your basic authentication access information for the header. For example, `Basic <base64 encode <accessId>:<accessKey>>`. For more information, see [Basic Access (Base64 encoded)](/docs/api/about-apis/getting-started#basic-access-base64-encoded).
* Select a template from the **Templates** dropdown.
The **Templates** dropdown shows a list of all incident templates by name configured in your Cloud SOAR environment.
<img src={useBaseUrl('img/connection-and-integration/create-new-connection-cloud-soar.png')} alt="Thumbnail icon" style={{border: '1px solid gray'}} width="500" />
<img src={useBaseUrl('img/connection-and-integration/create-new-connection-cloud-soar.png')} alt="Create New Connection Cloud SOAR icon" style={{border: '1px solid gray'}} width="500" />
1. Under **Alert and Recovery Payloads**, the default payload synchronizes with the selected template, and the **Alert Payload** field shows the associated `template_id` field automatically defined in the default payload.
A `template_id` is required in the payload in order to configure the connection:

Expand Down
Loading