diff --git a/docs/manage/fields.md b/docs/manage/fields.md index 6e89d506fd..6723f86199 100644 --- a/docs/manage/fields.md +++ b/docs/manage/fields.md @@ -310,9 +310,9 @@ If the field is not used by those features you will see the following prompt. #### View dropped fields -Dropped fields are fields being sent to Sumo, but are being ignored since they are not defined in your Fields schema. Use the dropdown option to the left of the **+ Add** button to select and view dropped fields.
dropped-fields-table +Dropped fields are fields being sent to Sumo Logic, but are being ignored since they are not defined in your fields schema. Use the fields dropdown to view the dropped fields.
dropped-fields-table -Select a dropped field from the table to open a details pane. There is a convenient button provided to create the field if needed. +Click on any dropped field of your choice from the table to open a details pane. There is a convenient button provided to create the field if needed. :::note It can take a few minutes for a created field to be removed from the **Dropped Fields** table. diff --git a/docs/manage/partitions/manage-indexes-variable-retention.md b/docs/manage/partitions/manage-indexes-variable-retention.md index f3167e9862..1b8e395997 100644 --- a/docs/manage/partitions/manage-indexes-variable-retention.md +++ b/docs/manage/partitions/manage-indexes-variable-retention.md @@ -44,12 +44,12 @@ You may edit the retention period of Partitions and Scheduled Views. The minimum 1. On the **Partitions** or **Scheduled Views** tab, hover over the item you would like to edit the retention period for. 1. Click the three-dot kebab icon on the right of the desired row, and from the menu select **Edit Retention Period**. (You may also edit the retention period from the expanded information dialog. Next to **Retention Period**, click **Edit**.) 1. In the **Edit Retention Period** dialog, enter the new retention period in days. - 1. If the new retention period is longer than the previous period, click **Save**.
edit_retention_period_save.png + 1. If the new retention period is longer than the previous period, click **Save**.
edit_retention_period_save.png :::info The new retention policy will apply to all logs in the partition that have not yet aged out, not just to newly ingested data. ::: 1. If the new retention period is shorter than the previous period, a portion of your data will be deleted in 7 days or right away. Click **Save** and choose either: - * Simulate this data deletion for a few days and then reduce it permanently by selecting **Apply change in 7 days**. You will be billed for this data until the deletion is permanent, but it gives you a sense of how the deletion will impact you before it is final.
reduce-retention-period + * Simulate this data deletion for a few days and then reduce it permanently by selecting **Apply change in 7 days**. You will be billed for this data until the deletion is permanent, but it gives you a sense of how the deletion will impact you before it is final.
reduce-retention-period :::info With this option, the retention period on your Partitions page will not change immediately. There will be an icon indicating that a retention decrease is imminent in a number of days. When the counter expires, the data will be deleted, the warning icon will disappear, and the new retention policy will be in effect. The retention period change applies to all data (including data ingested before the change). ::: diff --git a/docs/manage/scheduled-views/add-scheduled-view.md b/docs/manage/scheduled-views/add-scheduled-view.md index ee1a938ebf..3f8628938d 100644 --- a/docs/manage/scheduled-views/add-scheduled-view.md +++ b/docs/manage/scheduled-views/add-scheduled-view.md @@ -3,6 +3,7 @@ id: add-scheduled-view title: Add a Scheduled View description: Learn how to add a Scheduled View. --- +import useBaseUrl from '@docusaurus/useBaseUrl'; :::important To create a Scheduled View you must be an admin or have the Manage Scheduled Views [role capability](../users-roles/users/multi-account-access.md). @@ -10,8 +11,8 @@ To create a Scheduled View you must be an admin or have the Manage Scheduled V For Scheduled View query requirements, see [Scheduled Views Best Practices and Examples](scheduled-views-best-practices.md).  -1. In the main Sumo Logic menu, select **Manage Data > Logs > Scheduled Views**.
![scheduled-view-page.png](/img/scheduled-views/scheduled-view-page.png) -1. Click **+ Add Scheduled View**.
![add view.png](/img/scheduled-views/add-view.png) +1. In the main Sumo Logic menu, select **Manage Data > Logs > Scheduled Views**.
scheduled-view-page +1. Click **+ Add Scheduled View**.
add-view 1. **Scheduled View name**. Enter a name for the view. You'll use this name in queries to search the view, so use a name that's descriptive and easy to remember. Names can contain alphanumeric characters; underscores (`_`) are the only special characters allowed. View names can only have (A-Z, a-z, 0-9), $, and _ after the first letter. 1. **Query.** Enter the full query that encompasses the data you'd like indexed in the view. Parse operators and most search operators are supported in views. 1. **Search Mode**. Set to **Auto Parse Mode** for [Dynamic Parsing](../../search/get-started-with-search/build-search/dynamic-parsing.md) of JSON data. Manual Mode is the default search behavior. diff --git a/static/img/field-extraction-rules/fer-page.png b/static/img/field-extraction-rules/fer-page.png index df909ab5b7..788fe119bb 100644 Binary files a/static/img/field-extraction-rules/fer-page.png and b/static/img/field-extraction-rules/fer-page.png differ diff --git a/static/img/fields/create-field-from-dropped-table.png b/static/img/fields/create-field-from-dropped-table.png index 047bf3ccfa..b6876cfef5 100644 Binary files a/static/img/fields/create-field-from-dropped-table.png and b/static/img/fields/create-field-from-dropped-table.png differ diff --git a/static/img/fields/dropped-fields-table.png b/static/img/fields/dropped-fields-table.png index ce7080ded3..83866eef99 100644 Binary files a/static/img/fields/dropped-fields-table.png and b/static/img/fields/dropped-fields-table.png differ diff --git a/static/img/fields/fields-capacity.png b/static/img/fields/fields-capacity.png index 29c555a5e8..033d1021f4 100644 Binary files a/static/img/fields/fields-capacity.png and b/static/img/fields/fields-capacity.png differ diff --git a/static/img/fields/manage-fields-page.png b/static/img/fields/manage-fields-page.png index 718b8e148c..3235313a34 100644 Binary files a/static/img/fields/manage-fields-page.png and b/static/img/fields/manage-fields-page.png differ diff --git a/static/img/partitions-data-tiers/filter-and-search-a-partition.png b/static/img/partitions-data-tiers/filter-and-search-a-partition.png index e1791e28fa..94ce7fb7e9 100644 Binary files a/static/img/partitions-data-tiers/filter-and-search-a-partition.png and b/static/img/partitions-data-tiers/filter-and-search-a-partition.png differ diff --git a/static/img/partitions-data-tiers/partitions-page-flex.png b/static/img/partitions-data-tiers/partitions-page-flex.png index e283d751c5..fe2c5671bc 100644 Binary files a/static/img/partitions-data-tiers/partitions-page-flex.png and b/static/img/partitions-data-tiers/partitions-page-flex.png differ diff --git a/static/img/partitions-data-tiers/partitions-page.png b/static/img/partitions-data-tiers/partitions-page.png index 5eca4b560c..a261f36905 100644 Binary files a/static/img/partitions-data-tiers/partitions-page.png and b/static/img/partitions-data-tiers/partitions-page.png differ diff --git a/static/img/scheduled-views/scheduled-view-page.png b/static/img/scheduled-views/scheduled-view-page.png index b768663f8e..bfba6f3fca 100644 Binary files a/static/img/scheduled-views/scheduled-view-page.png and b/static/img/scheduled-views/scheduled-view-page.png differ