diff --git a/blog-service/2026-02-27-apps.md b/blog-service/2026-02-27-apps.md new file mode 100644 index 0000000000..923f92bc89 --- /dev/null +++ b/blog-service/2026-02-27-apps.md @@ -0,0 +1,46 @@ +--- +title: Apps, Solutions, and Collection Integrations - February Release +image: https://assets-www.sumologic.com/company-logos/_800x418_crop_center-center_82_none/SumoLogic_Preview_600x600.jpg?mtime=1617040082 +keywords: + - release-note + - february +hide_table_of_contents: true +--- + +#### Enhancements + +We’re excited to announce new enhancements to the following Sumo Logic apps, designed to improve visibility, usability, and troubleshooting capabilities while helping you gain deeper insights and operate more efficiently. + +- **Azure Security apps**. Updated the following Microsoft Azure Security apps to refresh sample queries, localize dashboard images, and add monitor alerts. + - **Azure Security - Microsoft Defender for Endpoint**. The monitor alerts help you identify and respond to critical endpoint threats by alerting on high-severity incidents, suspicious devices, and activity from embargoed or high-risk locations. [Learn more](/docs/integrations/microsoft-azure/microsoft-defender-for-endpoint/#azure-security---microsoft-defender-for-endpoint-alerts). + - **Azure Security - Microsoft Defender for Identity**. The monitor alerts help you detect and prioritize identity-based threats by alerting on high-severity incidents, embargoed locations, and suspicious devices to enable faster investigation and response. [Learn more](/docs/integrations/microsoft-azure/azure-security-microsoft-defender-for-identity/#azure-security---microsoft-defender-for-identity-alerts). + - **Azure Security - Microsoft Defender for Office 365**. The monitor alerts help you detect and respond to high-risk email and collaboration threats by alerting on embargoed locations, high-severity incidents, and suspicious device activity in Microsoft Defender for Office 365. [Learn more](/docs/integrations/microsoft-azure/azure-security-microsoft-defender-for-office-365/#azure-security---microsoft-defender-for-office-365-alerts). + - **Microsoft Graph Security**. The monitor alerts help you detect and prioritize critical security threats by alerting on high-severity incidents, risky devices, and suspicious activity from embargoed or high-risk locations using Microsoft Graph Security signals. [Learn more](/docs/integrations/saas-cloud/microsoft-graph-security-v2/#microsoft-graph-security-alerts). +- **Data Volume**. Added Data Volume monitor alerts that help you track log ingestion, detect usage spikes or data gaps, and prevent unexpected credit overages by alerting you to abnormal volume patterns and plan-limit risks in real time. [Learn more](/docs/integrations/sumo-apps/data-volume/#data-volume-app-alerts). +- **Enterprise Audit apps**. Updated the following Enterprise Audit apps to add monitor alerts. + - **Enterprise Audit - Collector & Data Forwarding Management**. The monitor alerts help you detect and respond to critical collector and data-forwarding issues, ensuring reliable data ingestion, secure configurations, and uninterrupted operations. [Learn more](/docs/integrations/sumo-apps/enterprise-audit/#enterprise-audit---collector-and-data-forwarding-management-app). + - **Enterprise Audit - Content Management**. The monitor alerts help you maintain security and compliance by alerting when content is made public or accessed publicly, enabling quick detection of unintended exposure and potential data risks. [Learn more](/docs/integrations/sumo-apps/enterprise-audit/#enterprise-audit---content-management-alerts). + - **Enterprise Audit – Cloud SIEM**. The monitor alerts help you detect and respond to high-risk security threats and SLA breaches by automatically alerting on critical Cloud SIEM activities like brute-force attacks, malware, anomalous access, and delayed detection or remediation. [Learn more](/docs/integrations/sumo-apps/cse/#enterprise-audit---cloud-siem-alerts). + - **Enterprise Audit - Security Management**. The monitor alerts help you ensure regulatory compliance and reduce risk by detecting and alerting on security events originating from embargoed or sanctioned geographic locations. [Learn more](/docs/integrations/sumo-apps/enterprise-audit/#enterprise-audit---security-management-alerts). + - **Enterprise Audit - User & Role Management**. The monitor alerts help you enhance security and compliance by alerting on user or role management activities originating from embargoed or high-risk geographic locations, enabling faster detection of suspicious access. [Learn more](/docs/integrations/sumo-apps/enterprise-audit/#enterprise-audit---user-and-role-management-alerts). +- **Enterprise Search Audit**. Added the **Enterprise Search Audit – Failures KPIs and Breakdowns** dashboard and monitor alerts to the app. + - The dashboard helps you understand search reliability at a glance by visualizing failure trends, slow-running queries, high-cost searches, and problematic content across users and query types, enabling faster troubleshooting and better prioritization of fixes. [Learn more](/docs/integrations/sumo-apps/enterprise-search-audit/#enterprise-search-audit---failures-kpis-and-breakdowns). + - The associated monitors alert you when search failures, query runtimes, or data usage exceed defined thresholds, allowing you to detect reliability, performance, or cost issues early and take corrective action before they impact users or budgets. [Learn more](/docs/integrations/sumo-apps/enterprise-search-audit/#enterprise-search-audit-app-alerts). +- **Flex**. Added Flex monitor alerts that help you detect ingestion spikes, prevent budget overruns, and control expensive queries by automatically flagging abnormal data usage and credit consumption before they impact costs or system stability. [Learn more](/docs/integrations/sumo-apps/flex/#flex-app-alerts). +- **Infrequent Data Tier**. Added Infrequent Data Tier monitor alerts that help you control costs and usage by detecting consumption spikes, expensive or failed queries, and abnormal user or module-level scan activity before they waste credits. [Learn more](/docs/integrations/sumo-apps/infrequent-data-tier/#infrequent-data-tier-app-alerts). +- **SentinelOne**. Added SentinelOne monitor alerts that help you detect high-risk threats, suspicious activity, and compliance violations in real time, enabling faster response and stronger endpoint security. + + + +#### App deprecation + +- **Security Analytics**. The Security Analytics has been deprecated and is no longer actively supported or recommended for use. \ No newline at end of file