diff --git a/docs/search/copilot-unstructured-logs-beta.md b/docs/search/copilot-unstructured-logs-beta.md new file mode 100644 index 0000000000..6c99c40b66 --- /dev/null +++ b/docs/search/copilot-unstructured-logs-beta.md @@ -0,0 +1,48 @@ +--- +id: copilot-unstructured-logs-beta +title: Sumo Logic Copilot - Unstructured Logs Support (Beta) +description: Streamline your log analysis with Sumo Logic Copilot, our AI-based assistant that simplifies log analysis by letting you ask questions in plain English, even for logs without a well-defined structure. +--- + +import useBaseUrl from '@docusaurus/useBaseUrl'; + + + + + +

Beta

+ +This feature is in Beta. For more information, contact your Sumo Logic account executive. + +Unstructured Logs Support for [Sumo Logic Copilot](/docs/search/copilot), our AI assistant, enables it to understand and provide insights from raw, text-based logs, even if they don't follow a structured format like JSON. This means you can ask questions in plain English and get meaningful results from nearly any log data, without requiring Field Extraction Rules (FERs). + +## What's new + +Currently, [Copilot works best on structured (JSON) logs](/docs/search/copilot/#compatible-log-formats). With this beta update, Copilot automatically applies parsing logic to unstructured logs, even if no FERs are configured. + +At this stage, Copilot prioritizes unstructured logs that are already used in dashboards, allowing it to surface insights from high-value log sources out-of-the-box. This means it won’t interpret all raw logs yet, but we’re actively working to broaden this support beyond dashboards. + +* **Broader coverage**. Copilot now parses and generates insights from unstructured log formats, even without FERs, making it useful for environments that include custom or inconsistent log types. +* **Improved usability**. Ask questions in natural language. Copilot interprets your intent and suggests relevant searches, even for raw, non-JSON logs. +* **Performance and reliability**. Response times and suggestion accuracy are consistent with Copilot’s structured log experience. +* **Security and compliance**. The same strict data handling and privacy standards apply. Unstructured Logs Support builds on Copilot’s secure foundation. + + + +### Common use cases + +* **General log exploration**. Ask questions about unstructured logs that are already used in your dashboards, even if they lack predefined fields. +* **Error triage**. Investigate frequently visualized log data to surface patterns and recurring issues in unstructured formats. +* **Security insights**. Detect anomalies or signs of failed logins by querying raw logs already powering security dashboards. +* **Smarter prioritization**. Copilot focuses on unstructured logs that are visualized in dashboards, helping you get meaningful insights from high-value data sources. + +## FAQ + +**Will Copilot interpret all my logs?**
+Copilot prioritizes unstructured logs that are already used in dashboards. This improves the relevance of insights and helps focus on high-value logs. + +**How is this different from structured log support?**
+Structured logs have predefined fields, allowing Copilot to map queries directly. For unstructured logs, Copilot uses AI and parsing techniques to infer structure on the fly. diff --git a/docs/search/get-started-with-search/build-search/intelliparse.md b/docs/search/get-started-with-search/build-search/intelliparse-beta.md similarity index 81% rename from docs/search/get-started-with-search/build-search/intelliparse.md rename to docs/search/get-started-with-search/build-search/intelliparse-beta.md index 0ec11c017e..47fe0f9040 100644 --- a/docs/search/get-started-with-search/build-search/intelliparse.md +++ b/docs/search/get-started-with-search/build-search/intelliparse-beta.md @@ -1,5 +1,5 @@ --- -id: intelliparse +id: intelliparse-beta title: Intelliparse Mode (Beta) description: Intelliparse mode extends automatic parsing to unstructured logs, allowing you to search and filter logs even when they don’t follow a consistent format like JSON. --- @@ -14,16 +14,14 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; This feature is currently available to select customers. Contact your Sumo Logic account representative to request access. -We've introduced a new parsing mode in the Log Search UI: Intelliparse mode. It extends automatic parsing to unstructured logs, allowing you to search and filter logs even when they don’t follow a consistent format like JSON. - - +We've introduced a new Log Search parsing mode called Intelliparse. It extends automatic parsing to unstructured logs, allowing you to search and filter logs even when they don’t follow a consistent format like JSON. ## Available parsing modes You can now choose from three parsing options in the log search UI: * **Intelliparse (new)**. Combines JSON parsing with automatic parsing of unstructured logs using pre-discovered parsers. -* [**Auto Parse**](/docs/search/get-started-with-search/build-search/dynamic-parsing). JSON blocks within logs are automatically parsed. +* **Auto Parse**. JSON blocks within logs are automatically parsed ([learn more](/docs/search/get-started-with-search/build-search/dynamic-parsing)). * **Manual**. No automatic parsing applied. log-search-parsing-modes.png @@ -76,7 +74,6 @@ Copilot uses Intelliparse mode in the background to: This integration allows Copilot to work with raw, unstructured log data; no setup required on your part. - +:::tip +Want to learn more about Intelliparse mode? [See how it works in Log Search](/docs/search/copilot-unstructured-logs-beta). +:::