From 8255d9152c60effa53979138b4bd41bb273360b7 Mon Sep 17 00:00:00 2001 From: Jagadisha V Date: Fri, 17 Oct 2025 09:58:01 +0530 Subject: [PATCH 1/7] Manage Organizations for MSSPs - Library Content (GA) --- blog-service/2025-10-24-manage.md | 12 +++ cid-redirects.json | 3 +- .../create-and-manage-orgs/index.md | 8 +- .../manage-orgs-for-mssps-csiem-rules.md | 20 +++-- .../manage-orgs-for-mssps.md | 75 ------------------- 5 files changed, 28 insertions(+), 90 deletions(-) create mode 100644 blog-service/2025-10-24-manage.md delete mode 100644 docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps.md diff --git a/blog-service/2025-10-24-manage.md b/blog-service/2025-10-24-manage.md new file mode 100644 index 0000000000..09779a7625 --- /dev/null +++ b/blog-service/2025-10-24-manage.md @@ -0,0 +1,12 @@ +--- +title: Manage Organizations for MSSPs - Library Content +image: https://help.sumologic.com/img/reuse/rss-image.jpg +keywords: + - manage + - mssps +hide_table_of_contents: true +--- + +import useBaseUrl from '@docusaurus/useBaseUrl'; + +We're excited to announce the ability to manage your **Library** content across your Enterprise multi-orgs and MSSP (typically a parent organization with multiple child organizations). This lets you to save, share, and manage log searches, dashboards, apps, and other Sumo Logic content for launching searches and dashboards with a single click. Additionally, you can use the content that others in your organization have already developed to continually discover new insights in your data. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules). \ No newline at end of file diff --git a/cid-redirects.json b/cid-redirects.json index ee72aee37d..92eb74a4f4 100644 --- a/cid-redirects.json +++ b/cid-redirects.json @@ -4531,5 +4531,6 @@ "/Search/Search-Query-Language/Parse-Operators": "/docs/search/search-query-language/parse-operators", "/docs/search/get-started-with-search-language/parsing-operators": "/docs/search/search-query-language/parse-operators", "/docs/get-started/training-certification-faq-new": "/docs/get-started/training-certification-faq", - "/docs/manage/scheduled-views/pausing-inactive-scheduled-views": "/docs/manage/scheduled-views/pause-disable-scheduled-views" + "/docs/manage/scheduled-views/pausing-inactive-scheduled-views": "/docs/manage/scheduled-views/pause-disable-scheduled-views", + "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps": "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules" } diff --git a/docs/manage/manage-subscription/create-and-manage-orgs/index.md b/docs/manage/manage-subscription/create-and-manage-orgs/index.md index 426d6c3275..f46ee75d6d 100644 --- a/docs/manage/manage-subscription/create-and-manage-orgs/index.md +++ b/docs/manage/manage-subscription/create-and-manage-orgs/index.md @@ -50,15 +50,9 @@ In this section, we'll introduce the following concepts:
icon

Manage Organizations for MSSPs - Cloud SIEM

 -

Learn how to manage organizational Cloud SIEM rules and rule tuning for MSSPs.

-
-
- + ## View a child org, child credits usage, and baseline diff --git a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md b/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md index dc9f505f95..488e5cccce 100644 --- a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md +++ b/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md @@ -1,12 +1,12 @@ --- id: manage-orgs-for-mssps-csiem-rules -title: Manage Organizations for MSSPs - Cloud SIEM -sidebar_label: Manage Orgs for MSSPs - Cloud SIEM -description: Learn how to manage organizational Cloud SIEM rules and rule tuning for Managed Security Service Providers (MSSPs). +title: Manage Organizations for MSSPs +sidebar_label: Manage Orgs for MSSPs +description: Learn how to manage organizational Cloud SIEM rules, rule tuning expressions, and organizational library content for Managed Security Service Providers (MSSPs). --- import useBaseUrl from '@docusaurus/useBaseUrl'; -This article describes how to manage Cloud SIEM rules and rule tuning expressions in organizations for Managed Security Service Providers (MSSPs). MSSP administrators must ensure that the content of their child organizations is properly configured. MSSPs often consist of a parent organization with child organizations that use [Cloud SIEM](/docs/cse/). +This article describes how to manage Cloud SIEM rules, rule tuning expressions, and organizational library content for Managed Security Service Providers (MSSPs). MSSP administrators must ensure that the content of their child organizations is properly configured. MSSPs often consist of a parent organization with child organizations that use [Cloud SIEM](/docs/cse/). ## Considerations @@ -23,11 +23,9 @@ You must have the following [organization role capabilities](/docs/manage/users- If you are logged in to a parent organization with child organizations that also use Cloud SIEM, the insights list page in Cloud SIEM allows you to [view insights in child organizations](/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui/#view-insights-in-child-organizations). - ## Manage Cloud SIEM rules @@ -36,6 +34,7 @@ To ensure that content is consistent across child organizations, use the **Manag You can push the following: * Cloud SIEM [rules](/docs/cse/rules/) * Cloud SIEM [rule tuning expressions](/docs/cse/rules/rule-tuning-expressions/) +* [Library](/docs/get-started/library) 1. [**New UI**](/docs/get-started/sumo-logic-ui). In the main Sumo Logic menu, select **Organizations**. You can also click the **Go To...** menu at the top of the screen and select **Organizations**.
[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Administration > Organizations**. 1. Select the **Manage Content** tab. @@ -43,15 +42,22 @@ You can push the following: 1. In the **Content** bar, select the content to be pushed: * **Cloud SIEM Rules**. For more information about Cloud SIEM rules, refer to [Cloud SIEM Rules](/docs/cse/rules/). * **Cloud SIEM Rule Tuning**. For more information about Cloud SIEM rule tuning expressions, refer to [Rule Tuning Expressions](/docs/cse/rules/rule-tuning-expressions/). + * **Library**. For more information about Library items, refer to [Managing Your Sumo Logic Library](/docs/get-started/library). 1. Select individual items to be pushed, or all items. 1. Click **Push to Orgs**.
Push Selected Items button -1. On the **Push Selected Items** box, navigate to the **Destinations** section to select the organizations to push the selected items to. You can push to all organizations, a single child organization, or multiple child organizations.
Push Selected Items dialog +1. On the **Push Selected Content** box, navigate to the **Destinations** section to select the organizations to push the selected items to. You can push to all organizations, a single child organization, or multiple child organizations.
Push Selected Items dialog 1. Click **Push**. A **Pushing in progress** dialog is displayed. ### Tips * If you select **All Child Organizations**, you can then select organizations to exclude, allowing you to push to all organizations except those you select:
Selected organizations * When you push rule tuning expressions, select **Include Associated Cloud SIEM Rules** to push all the Cloud SIEM rules that the expressions are used on:
Include Associated Cloud SIEM Rules checkbox +* Selected Library items are added to the [Admin Recommended](/docs/manage/content-sharing/admin-mode/#move-important-content-to-admin-recommended) folder. Additionally, you can only select the Library contents in Source Organization under the Admin Recommended folder. +* **Scheduled Searches Connection**. Select **Include Connection** to create the scheduled searches in the target organizations if they don't already exist there. Select **Ignore Connection** only if you want to turn the added scheduled searches into saved searches. +* **Scheduled Reports**. Select **Include Scheduled Reports** to create the scheduled reports in the target organizations if they don't already exist there. Select **Ignore Scheduled Reports** only if you want to turn the added scheduled reports into saved reports. + :::note + Both **Scheduled Searches Connection** and **Scheduled Reports** will be available only when you select a library *folder*. + ::: ### Limitations diff --git a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps.md b/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps.md deleted file mode 100644 index b33ba89f78..0000000000 --- a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps.md +++ /dev/null @@ -1,75 +0,0 @@ ---- -id: manage-orgs-for-mssps -title: Manage Organizations for MSSPs -sidebar_label: Manage Orgs for MSSPs -description: Learn how to manage library content for Managed Security Service Providers (MSSPs). ---- - - - - - -

Beta

- -import useBaseUrl from '@docusaurus/useBaseUrl'; - - - -This article describes how to manage organizational library content for Managed Security Service Providers (MSSPs). MSSP administrators must ensure that the content of their child organizations is properly configured. MSSPs often consist of a parent organization with child organizations that use [Cloud SIEM](/docs/cse/). - -## Considerations - -### Roles - -You must have the following [organization role capabilities](/docs/manage/users-roles/roles/role-capabilities/#organizations) to create and manage organizations as an MSSP administrator: - -* Organizations - * View Organizations - * Create Organizations - * Manage Organizations - -## Manage content in organizations - -To ensure that [Library](/docs/get-started/library) content is consistent across child organizations, use the **Manage Content** tab to push content in target organizations with content from a source organization. - -1. [**New UI**](/docs/get-started/sumo-logic-ui). In the main Sumo Logic menu, select **Organizations**. You can also click the **Go To...** menu at the top of the screen and select **Organizations**.
[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Administration > Organizations**. -1. Select the **Manage Content** tab. -1. In the **Source Org** field, select the organization that will provide the source data to be pushed in other organizations. -1. In the **Content** bar, select **Library**. For more information about Library items, refer to [Managing Your Sumo Logic Library](/docs/get-started/library). -1. Select individual items to be pushed, or all items. -1. Click **Push Selected Items**.
Push Selected Items button -1. On the **Push Selected Content** box, navigate to the **Destinations** section to select the organizations to push the selected items to. You can push to all organizations, a single child organization, or multiple child organizations.
Push Selected Items dialog -1. Click **Push**. A **Pushing in progress** dialog is displayed. - -### Tips - -* If you select **All Child Organizations**, you can then select organizations to exclude, allowing you to push to all organizations except those you select:
Selected organizations -* Selected Library items are added to the [Admin Recommended](/docs/manage/content-sharing/admin-mode/#move-important-content-to-admin-recommended) folder. Additionally, you can only select the Library contents in Source Organization under the Admin Recommended folder. -* **Scheduled Searches Connection**. Select **Include Connection** to create the scheduled searches in the target organizations if they don't already exist there. Select **Ignore Connection** only if you want to turn the added scheduled searches into saved searches. -* **Scheduled Reports**. Select **Include Scheduled Reports** to create the scheduled reports in the target organizations if they don't already exist there. Select **Ignore Scheduled Reports** only if you want to turn the added scheduled reports into saved reports. - :::note - Both **Scheduled Searches Connection** and **Scheduled Reports** will be available only when you select a library *folder*. - ::: - -### Limitations - -- If an item with the same name exists in the target organization, it will be replaced. -- Once a push is initiated, it cannot be reversed. Administrators should carefully review their selections before updating. -- If errors occur during the push, administrators must manually re-attempt the failed push. To see failed pushes, use [View History](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules#view-history). -- Push operations may take longer based on the volume of content being pushed. -- Rule tuning expressions must be pushed separately from rules. -- *Cloud SIEM Legacy Rule Type* is not supported for sync or push. - -:::info -To learn how to view history and view updates in the audit log​, refer to [Manage Organizations for MSSPs - Cloud SIEM](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules). -::: - -## FAQs - -* **What happens when a item with the same name already exists?**
It will be replaced in the child organization. -* **What happens if an item selected for push doesn't already exist in the target organization?**
The item will be created in the target organization. -* **What if errors occur during pushing?**
Affected items will be skipped. Once the rest of the content is pushed, you can review errors in [View History](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules#view-history) and retry. -* **Can I roll back changes after a push operation?**
No, rollback is not supported. After a push operation is initiated, changes cannot be reversed. -* **How can I monitor push progress?**
During a push, the system displays real-time status, including progress tracking, success or failure messages, and error logs. -* **How can I view push history?**
Click **View History** in the upper-right corner of the page. A query for push history will display, showing the email of the individual who performed the push and the pushed items. -* **Who can I contact for additional questions or support?**
Reach out to your Sumo Logic representative with any questions, issues, or feedback. From bed2757f38cc899d8160577f7712934a6885b7de Mon Sep 17 00:00:00 2001 From: Jagadisha V Date: Fri, 17 Oct 2025 10:09:31 +0530 Subject: [PATCH 2/7] minor fixes --- blog-service/2025-03-07-manage.md | 4 +--- blog-service/2025-06-27-manage.md | 2 +- docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md | 5 ++--- .../manage-orgs-for-mssps-csiem-rules.md | 2 ++ 4 files changed, 6 insertions(+), 7 deletions(-) diff --git a/blog-service/2025-03-07-manage.md b/blog-service/2025-03-07-manage.md index 4cdca4c5f1..46a3c9c503 100644 --- a/blog-service/2025-03-07-manage.md +++ b/blog-service/2025-03-07-manage.md @@ -10,9 +10,7 @@ hide_table_of_contents: true import useBaseUrl from '@docusaurus/useBaseUrl'; - - -We are excited to announce a new **Content Management** tab that allows MSSP administrators the ability to conveniently push updates to multiple child organizations at once. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps/). +We are excited to announce a new **Content Management** tab that allows MSSP administrators the ability to conveniently push updates to multiple child organizations at once. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules/). :::note This feature is in Beta. To participate, contact your Sumo Logic account executive or our Support Team. diff --git a/blog-service/2025-06-27-manage.md b/blog-service/2025-06-27-manage.md index c6f2c9f2e6..60ced922d0 100644 --- a/blog-service/2025-06-27-manage.md +++ b/blog-service/2025-06-27-manage.md @@ -10,7 +10,7 @@ hide_table_of_contents: true import useBaseUrl from '@docusaurus/useBaseUrl'; -We are excited to announce the ability to manage library content on the new **Manage Content** tab. Now MSSP administrators can conveniently push content in the **Library** folder to multiple child organizations at once, including dashboards, saved searches, and scheduled searches. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps/). +We are excited to announce the ability to manage library content on the new **Manage Content** tab. Now MSSP administrators can conveniently push content in the **Library** folder to multiple child organizations at once, including dashboards, saved searches, and scheduled searches. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules/). :::note This feature is in Beta. To participate, contact your Sumo Logic account executive or our Support Team. diff --git a/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md b/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md index b735a378b0..367de7db61 100644 --- a/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md +++ b/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md @@ -82,9 +82,8 @@ This multi-insights list page (also known as a "federated" page) shows insights To be able to see insights in child organizations, [add child organizations](/docs/manage/manage-subscription/create-and-manage-orgs/create-manage-orgs) that use Cloud SIEM. Then when the parent organization user goes to their Cloud SIEM insights list page, all the child organizations' insights appear in the list. - + +For more information, see [Multi-insights list page in Cloud SIEM](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules/#multi-insights-list-page-in-cloud-siem). ## Insight details page diff --git a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md b/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md index 488e5cccce..a9d8b90c4e 100644 --- a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md +++ b/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md @@ -67,6 +67,8 @@ You can push the following: - Push operations may take longer based on the volume of content being pushed. - Rule tuning expressions must be pushed separately from rules. - *Cloud SIEM Legacy Rule Type* is not supported for sync or push. +- For library content, breaching 15000 cap (Items selected in one job X Child orgs targeted in one job) would fail the sync job. +- ## View history From 663b75a2aeb21fb481083b8517428c6263dfccd9 Mon Sep 17 00:00:00 2001 From: Jagadisha V <129049263+JV0812@users.noreply.github.com> Date: Fri, 17 Oct 2025 10:10:50 +0530 Subject: [PATCH 3/7] Update blog-service/2025-10-24-manage.md --- blog-service/2025-10-24-manage.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/blog-service/2025-10-24-manage.md b/blog-service/2025-10-24-manage.md index 09779a7625..d23d9d4f32 100644 --- a/blog-service/2025-10-24-manage.md +++ b/blog-service/2025-10-24-manage.md @@ -9,4 +9,4 @@ hide_table_of_contents: true import useBaseUrl from '@docusaurus/useBaseUrl'; -We're excited to announce the ability to manage your **Library** content across your Enterprise multi-orgs and MSSP (typically a parent organization with multiple child organizations). This lets you to save, share, and manage log searches, dashboards, apps, and other Sumo Logic content for launching searches and dashboards with a single click. Additionally, you can use the content that others in your organization have already developed to continually discover new insights in your data. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules). \ No newline at end of file +We're excited to announce the ability to manage your **Library** content across your Enterprise multi-orgs and MSSP (typically a parent organization with multiple child organizations). This lets you to save, share, and manage log searches, dashboards, apps, and other Sumo Logic content for launching searches and dashboards with a single click. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules). \ No newline at end of file From 9f8cb21c22efb0d0313301172337504fdc655caa Mon Sep 17 00:00:00 2001 From: Jagadisha V Date: Fri, 17 Oct 2025 12:05:30 +0530 Subject: [PATCH 4/7] minor fix --- cid-redirects.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cid-redirects.json b/cid-redirects.json index 92eb74a4f4..2250f8a5b7 100644 --- a/cid-redirects.json +++ b/cid-redirects.json @@ -1868,7 +1868,7 @@ "/cid/1082": "/docs/metrics/introduction/get-started-metrics", "/cid/10820": "/docs/manage/manage-subscription/create-and-manage-orgs/create-manage-orgs", "/cid/10821": "/docs/search/get-started-with-search/search-page/change-time-range-in-histogram", - "/cid/108221": "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps", + "/cid/108221": "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules", "/cid/1083": "/docs/manage/users-roles/roles/role-based-access-control", "/cid/1084": "/docs/metrics/manage-metric-volume/disabled-metrics-sources", "/cid/1085": "/docs/send-data/installed-collectors/macos", From 155fcd6498366629e0277d9b9eb054930ffcb4da Mon Sep 17 00:00:00 2001 From: Jagadisha V Date: Mon, 20 Oct 2025 15:58:22 +0530 Subject: [PATCH 5/7] limitations added --- .../manage-orgs-for-mssps-csiem-rules.md | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md b/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md index a9d8b90c4e..91b6de37cd 100644 --- a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md +++ b/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md @@ -67,8 +67,15 @@ You can push the following: - Push operations may take longer based on the volume of content being pushed. - Rule tuning expressions must be pushed separately from rules. - *Cloud SIEM Legacy Rule Type* is not supported for sync or push. -- For library content, breaching 15000 cap (Items selected in one job X Child orgs targeted in one job) would fail the sync job. -- +- For library content, breaching 15,000 cap (Items selected in one job X Child orgs targeted in one job) would fail the sync job. +- The maximum runtime for jobs below 1200 requests (Items selected in one job X Child orgs targeted in one job) is less than or equal to 2 mins. Linear increase beyond 1200 request would take more runtime, for example, 15,201 would nearly take 30 mins. +- For CSIEM rules and tuning expression (Rule or Tuning Exp × child-orgs): + - Expected runtime for less than or equal to 300 async calls is under 2 mins. + - Expected runtime for nearly 1500 async calls is 5-7 mins. + - Expected runtime for nearly 3000 async calls is 15 mins. + - Make sure you keep the Child orgs per job less than or equal to 3 when you push more than 250 rules for a faster runtime. + - Make sure you keep the rule or tuning expressions per job less than or equal to 500 for a faster runtime + ## View history From 62f6d55071d5c343daf4337eee6fd6155bdf63b8 Mon Sep 17 00:00:00 2001 From: Jagadisha V <129049263+JV0812@users.noreply.github.com> Date: Sun, 26 Oct 2025 16:18:31 +0530 Subject: [PATCH 6/7] Update docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md Co-authored-by: John Pipkin (Sumo Logic) --- .../create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md b/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md index 91b6de37cd..2a2cce7188 100644 --- a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md +++ b/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md @@ -27,7 +27,7 @@ This multi-insights list page (also known as a "federated" page) shows insights To be able to see insights in child organizations, add child organizations that use Cloud SIEM. Then when the parent organization user goes to their Cloud SIEM insights list page, all the child organizations' insights appear in the list. -## Manage Cloud SIEM rules +## Manage content To ensure that content is consistent across child organizations, use the **Manage Content** tab to push content in target organizations with content from a source organization. From c5f7a44d7bd0973c97e1098faae17553c02984b2 Mon Sep 17 00:00:00 2001 From: Jagadisha V Date: Sun, 26 Oct 2025 16:23:15 +0530 Subject: [PATCH 7/7] file name change --- blog-service/2025-03-07-manage.md | 2 +- blog-service/2025-06-27-manage.md | 2 +- blog-service/2025-10-24-manage.md | 2 +- cid-redirects.json | 6 +++--- .../cse/get-started-with-cloud-siem/about-cse-insight-ui.md | 2 +- .../manage-subscription/create-and-manage-orgs/index.md | 2 +- ...gs-for-mssps-csiem-rules.md => manage-orgs-for-mssps.md} | 4 ++-- sidebars.ts | 2 +- 8 files changed, 11 insertions(+), 11 deletions(-) rename docs/manage/manage-subscription/create-and-manage-orgs/{manage-orgs-for-mssps-csiem-rules.md => manage-orgs-for-mssps.md} (99%) diff --git a/blog-service/2025-03-07-manage.md b/blog-service/2025-03-07-manage.md index 46a3c9c503..60967d4a26 100644 --- a/blog-service/2025-03-07-manage.md +++ b/blog-service/2025-03-07-manage.md @@ -10,7 +10,7 @@ hide_table_of_contents: true import useBaseUrl from '@docusaurus/useBaseUrl'; -We are excited to announce a new **Content Management** tab that allows MSSP administrators the ability to conveniently push updates to multiple child organizations at once. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules/). +We are excited to announce a new **Content Management** tab that allows MSSP administrators the ability to conveniently push updates to multiple child organizations at once. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps/). :::note This feature is in Beta. To participate, contact your Sumo Logic account executive or our Support Team. diff --git a/blog-service/2025-06-27-manage.md b/blog-service/2025-06-27-manage.md index 60ced922d0..c6f2c9f2e6 100644 --- a/blog-service/2025-06-27-manage.md +++ b/blog-service/2025-06-27-manage.md @@ -10,7 +10,7 @@ hide_table_of_contents: true import useBaseUrl from '@docusaurus/useBaseUrl'; -We are excited to announce the ability to manage library content on the new **Manage Content** tab. Now MSSP administrators can conveniently push content in the **Library** folder to multiple child organizations at once, including dashboards, saved searches, and scheduled searches. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules/). +We are excited to announce the ability to manage library content on the new **Manage Content** tab. Now MSSP administrators can conveniently push content in the **Library** folder to multiple child organizations at once, including dashboards, saved searches, and scheduled searches. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps/). :::note This feature is in Beta. To participate, contact your Sumo Logic account executive or our Support Team. diff --git a/blog-service/2025-10-24-manage.md b/blog-service/2025-10-24-manage.md index d23d9d4f32..12048f2691 100644 --- a/blog-service/2025-10-24-manage.md +++ b/blog-service/2025-10-24-manage.md @@ -9,4 +9,4 @@ hide_table_of_contents: true import useBaseUrl from '@docusaurus/useBaseUrl'; -We're excited to announce the ability to manage your **Library** content across your Enterprise multi-orgs and MSSP (typically a parent organization with multiple child organizations). This lets you to save, share, and manage log searches, dashboards, apps, and other Sumo Logic content for launching searches and dashboards with a single click. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules). \ No newline at end of file +We're excited to announce the ability to manage your **Library** content across your Enterprise multi-orgs and MSSP (typically a parent organization with multiple child organizations). This lets you to save, share, and manage log searches, dashboards, apps, and other Sumo Logic content for launching searches and dashboards with a single click. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps). \ No newline at end of file diff --git a/cid-redirects.json b/cid-redirects.json index 2250f8a5b7..dfb13b06f6 100644 --- a/cid-redirects.json +++ b/cid-redirects.json @@ -1868,7 +1868,7 @@ "/cid/1082": "/docs/metrics/introduction/get-started-metrics", "/cid/10820": "/docs/manage/manage-subscription/create-and-manage-orgs/create-manage-orgs", "/cid/10821": "/docs/search/get-started-with-search/search-page/change-time-range-in-histogram", - "/cid/108221": "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules", + "/cid/108221": "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps", "/cid/1083": "/docs/manage/users-roles/roles/role-based-access-control", "/cid/1084": "/docs/metrics/manage-metric-volume/disabled-metrics-sources", "/cid/1085": "/docs/send-data/installed-collectors/macos", @@ -2409,7 +2409,7 @@ "/cid/5148": "/docs/send-data/installed-collectors/collector-installation-reference/set-collector-as-ephemeral", "/cid/5150": "/", "/cid/5154": "/docs/manage/fields", - "/cid/5157": "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules", + "/cid/5157": "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps", "/cid/5155": "/docs/manage/field-extractions", "/cid/5156": "/docs/send-data/collection/processing-rules", "/cid/5162": "/docs/manage/security/access-keys", @@ -4532,5 +4532,5 @@ "/docs/search/get-started-with-search-language/parsing-operators": "/docs/search/search-query-language/parse-operators", "/docs/get-started/training-certification-faq-new": "/docs/get-started/training-certification-faq", "/docs/manage/scheduled-views/pausing-inactive-scheduled-views": "/docs/manage/scheduled-views/pause-disable-scheduled-views", - "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps": "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules" + "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules": "/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps" } diff --git a/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md b/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md index 367de7db61..3cfefe7ba4 100644 --- a/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md +++ b/docs/cse/get-started-with-cloud-siem/about-cse-insight-ui.md @@ -83,7 +83,7 @@ This multi-insights list page (also known as a "federated" page) shows insights To be able to see insights in child organizations, [add child organizations](/docs/manage/manage-subscription/create-and-manage-orgs/create-manage-orgs) that use Cloud SIEM. Then when the parent organization user goes to their Cloud SIEM insights list page, all the child organizations' insights appear in the list. -For more information, see [Multi-insights list page in Cloud SIEM](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules/#multi-insights-list-page-in-cloud-siem). +For more information, see [Multi-insights list page in Cloud SIEM](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps/#multi-insights-list-page-in-cloud-siem). ## Insight details page diff --git a/docs/manage/manage-subscription/create-and-manage-orgs/index.md b/docs/manage/manage-subscription/create-and-manage-orgs/index.md index f46ee75d6d..644c0f440c 100644 --- a/docs/manage/manage-subscription/create-and-manage-orgs/index.md +++ b/docs/manage/manage-subscription/create-and-manage-orgs/index.md @@ -49,7 +49,7 @@ In this section, we'll introduce the following concepts:
- icon

Manage Organizations for MSSPs - Cloud SIEM

 + icon

Manage Organizations for MSSPs - Cloud SIEM

Learn how to manage organizations for Managed Security Service Providers (MSSPs).

diff --git a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md b/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps.md similarity index 99% rename from docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md rename to docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps.md index 91b6de37cd..7667417c9c 100644 --- a/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules.md +++ b/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps.md @@ -1,5 +1,5 @@ --- -id: manage-orgs-for-mssps-csiem-rules +id: manage-orgs-for-mssps title: Manage Organizations for MSSPs sidebar_label: Manage Orgs for MSSPs description: Learn how to manage organizational Cloud SIEM rules, rule tuning expressions, and organizational library content for Managed Security Service Providers (MSSPs). @@ -74,7 +74,7 @@ You can push the following: - Expected runtime for nearly 1500 async calls is 5-7 mins. - Expected runtime for nearly 3000 async calls is 15 mins. - Make sure you keep the Child orgs per job less than or equal to 3 when you push more than 250 rules for a faster runtime. - - Make sure you keep the rule or tuning expressions per job less than or equal to 500 for a faster runtime + - Make sure you keep the rule or tuning expressions per job less than or equal to 500 for a faster runtime. ## View history diff --git a/sidebars.ts b/sidebars.ts index abf4bce0af..7780c611ec 100644 --- a/sidebars.ts +++ b/sidebars.ts @@ -993,7 +993,7 @@ module.exports = { 'manage/manage-subscription/create-and-manage-orgs/create-manage-orgs-service-providers', 'manage/manage-subscription/create-and-manage-orgs/create-manage-orgs-flex', 'manage/manage-subscription/create-and-manage-orgs/manage-org-settings', - 'manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps-csiem-rules', + 'manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps', ], }, {