-
Notifications
You must be signed in to change notification settings - Fork 225
DOCS-752 - Copilot unstructured logs beta #5196
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Changes from 14 commits
Commits
Show all changes
22 commits
Select commit
Hold shift + click to select a range
e46c954
Copilot unstructured logs
kimsauce 177329d
Merge branch 'main' into DOCS-752
kimsauce 39766e7
merge w/main and edit using meeting slide info
kimsauce b23dd2f
add rn
kimsauce f68d386
refine doc, rn, x-link intelliparse
kimsauce d24d9e6
Merge branch 'main' into DOCS-752
kimsauce 47e056e
updates per CP
kimsauce c0baebf
Update blog-service/2025-04-30-copilot.md
kimsauce 1d44aac
edit per CP
kimsauce 32e8987
Update docs/search/copilot-unstructured-logs.md
kimsauce dc2cf5b
Merge branch 'main' into DOCS-752
kimsauce 02f0ffc
cross-linking
kimsauce 28e8bf9
Merge branch 'DOCS-752' of github.com:SumoLogic/sumologic-documentati…
kimsauce e342ba9
Delete blog-service/2025-04-30-copilot.md
kimsauce 3a5a427
Update docs/search/copilot-unstructured-logs-beta.md
kimsauce faa0c5b
Update docs/search/copilot-unstructured-logs-beta.md
kimsauce 1abf4f2
Merge branch 'main' into DOCS-752
kimsauce 3de6c7b
reduce intelliparse section
kimsauce 1beef52
Update copilot-unstructured-logs-beta.md
kimsauce 2a65f27
link fix
kimsauce f8c1e18
Merge branch 'DOCS-752' of github.com:SumoLogic/sumologic-documentati…
kimsauce 7da306e
Update docs/search/copilot-unstructured-logs-beta.md
JV0812 File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,50 @@ | ||
--- | ||
id: copilot-unstructured-logs-beta | ||
title: Sumo Logic Copilot - Unstructured Logs Support (Beta) | ||
description: Streamline your log analysis with Sumo Logic Copilot, our AI-based assistant that simplifies log analysis by letting you ask questions in plain English, even for logs without a well-defined structure. | ||
--- | ||
|
||
import Iframe from 'react-iframe'; | ||
import useBaseUrl from '@docusaurus/useBaseUrl'; | ||
|
||
<head> | ||
<meta name="robots" content="noindex" /> | ||
</head> | ||
|
||
<p><a href="/docs/beta"><span className="beta">Beta</span></a></p> | ||
|
||
This feature is in Beta. For more information, contact your Sumo Logic account executive. | ||
|
||
Unstructured Logs Support for [Sumo Logic Copilot](/docs/search/copilot), our AI assistant, enables it to understand and provide insights from raw, text-based logs, even if they don't follow a structured format like JSON. This means you can ask questions in plain English and get meaningful results from nearly any log data, without requiring Field Extraction Rules (FERs). | ||
|
||
## What's new | ||
|
||
Currently, [Copilot works best on structured (JSON) logs](/docs/search/copilot/#compatible-log-formats). With this beta update, Copilot automatically applies parsing logic to unstructured logs, even if no FERs are configured. This allows Copilot to interpret logs from many popular data sources out-of-the-box and enables support for a broader range of log types. | ||
|
||
* **Broader coverage**. Copilot now parses and generates insights from unstructured log formats, even without FERs, making it useful for environments that include custom or inconsistent log types. | ||
* **Improved usability**. Ask questions in natural language. Copilot interprets your intent and suggests relevant searches, even for raw, non-JSON logs. | ||
* **Performance and reliability**. Response times and suggestion accuracy are consistent with Copilot’s structured log experience. | ||
* **Security and compliance**. The same strict data handling and privacy standards apply. Unstructured Logs Support builds on Copilot’s secure foundation. | ||
|
||
### Powered by Intelliparse mode | ||
|
||
Copilot now uses [Intelliparse Mode](/docs/search/get-started-with-search/build-search/intelliparse) to extract fields from unstructured logs. This new parsing engine automatically applies parsing logic based on logs already used in your dashboards, allowing Copilot to work with raw logs that don’t follow a consistent format. | ||
kimsauce marked this conversation as resolved.
Show resolved
Hide resolved
|
||
|
||
You’ll get more meaningful results from logs that are already powering visualizations and queries without needing to manually define parsing logic or create Field Extraction Rules (FERs). | ||
|
||
Copilot uses a hidden `intelliparse` operator behind the scenes that's injected automatically into relevant queries to extract fields, making unstructured logs easier to work with. | ||
|
||
### Common use cases | ||
|
||
* **General log exploration**. Ask questions about unstructured logs that are already used in your dashboards, even if they lack predefined fields. | ||
* **Error triage**. Investigate frequently visualized log data to surface patterns and recurring issues in unstructured formats. | ||
JV0812 marked this conversation as resolved.
Show resolved
Hide resolved
|
||
* **Security insights**. Detect anomalies or signs of failed logins by querying raw logs already powering security dashboards. | ||
* **Smarter prioritization**. Copilot focuses on unstructured logs that are visualized in dashboards, helping you get meaningful insights from high-value data sources. | ||
|
||
## FAQ | ||
|
||
**Will Copilot interpret all my logs?**<br/> | ||
Copilot prioritizes unstructured logs that are already used in dashboards. This improves the relevance of insights and helps focus on high-value logs. | ||
|
||
**How is this different from structured log support?**<br/> | ||
Structured logs have predefined fields, allowing Copilot to map queries directly. For unstructured logs, Copilot uses AI and parsing techniques to infer structure on the fly. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.