Skip to content

Commit b87e540

Browse files
JV0812jpipkin1
andauthored
C3M Monitors (#6081)
* C3M Monitors * minor fix * Update docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps.md Co-authored-by: John Pipkin (Sumo Logic) <jpipkin@sumologic.com> * Update blog-service/2025-12-10-manage.md Co-authored-by: John Pipkin (Sumo Logic) <jpipkin@sumologic.com> * Rename 2025-12-10-manage.md to 2025-12-15-manage.md --------- Co-authored-by: John Pipkin (Sumo Logic) <jpipkin@sumologic.com>
1 parent 1268000 commit b87e540

File tree

3 files changed

+18
-2
lines changed

3 files changed

+18
-2
lines changed

blog-service/2025-12-15-manage.md

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
---
2+
title: Manage Organizations for MSSPs - Monitors
3+
image: https://help.sumologic.com/img/reuse/rss-image.jpg
4+
keywords:
5+
- manage
6+
- mssps
7+
hide_table_of_contents: true
8+
---
9+
10+
import useBaseUrl from '@docusaurus/useBaseUrl';
11+
12+
We're excited to announce the ability to manage monitors for enterprises with multiple organizations such as MSSPs (which typically have a parent organization with multiple child organizations). This lets you save, share, and manage monitors for tracking your metrics and logs data in real time and send notifications when noteworthy changes happen in your applications. [Learn more](/docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps).

docs/manage/manage-subscription/create-and-manage-orgs/manage-orgs-for-mssps.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,11 @@
22
id: manage-orgs-for-mssps
33
title: Manage Organizations for MSSPs
44
sidebar_label: Manage Orgs for MSSPs
5-
description: Learn how to manage organizational Cloud SIEM rules, rule tuning expressions, and organizational library content for Managed Security Service Providers (MSSPs).
5+
description: Learn how to manage organizational Cloud SIEM rules, rule tuning expressions, organizational library content, and monitors for Managed Security Service Providers (MSSPs).
66
---
77
import useBaseUrl from '@docusaurus/useBaseUrl';
88

9-
This article describes how to manage Cloud SIEM rules, rule tuning expressions, and organizational library content for Managed Security Service Providers (MSSPs). MSSP administrators must ensure that the content of their child organizations is properly configured. MSSPs often consist of a parent organization with child organizations that use [Cloud SIEM](/docs/cse/).
9+
This article describes how to manage Cloud SIEM rules, rule tuning expressions, organizational library content, and monitors for Managed Security Service Providers (MSSPs). MSSP administrators must ensure that the content of their child organizations is properly configured. MSSPs often consist of a parent organization with child organizations that use [Cloud SIEM](/docs/cse/).
1010

1111
## Considerations
1212

@@ -35,6 +35,7 @@ You can push the following:
3535
* Cloud SIEM [rules](/docs/cse/rules/)
3636
* Cloud SIEM [rule tuning expressions](/docs/cse/rules/rule-tuning-expressions/)
3737
* [Library](/docs/get-started/library)
38+
* [Monitors](/docs/alerts/monitors/)
3839

3940
1. [**New UI**](/docs/get-started/sumo-logic-ui). In the main Sumo Logic menu, select **Organizations**. You can also click the **Go To...** menu at the top of the screen and select **Organizations**.<br/>[**Classic UI**](/docs/get-started/sumo-logic-ui-classic). In the main Sumo Logic menu, select **Administration > Organizations**.
4041
1. Select the **Manage Content** tab.
@@ -43,6 +44,7 @@ You can push the following:
4344
* **Cloud SIEM Rules**. For more information about Cloud SIEM rules, refer to [Cloud SIEM Rules](/docs/cse/rules/).
4445
* **Cloud SIEM Rule Tuning**. For more information about Cloud SIEM rule tuning expressions, refer to [Rule Tuning Expressions](/docs/cse/rules/rule-tuning-expressions/).
4546
* **Library**. For more information about Library items, refer to [Managing Your Sumo Logic Library](/docs/get-started/library).
47+
* **Monitors**. For more information about Monitors, refer to [Monitors](/docs/alerts/monitors/).
4648
1. Select individual items to be pushed, or all items.
4749
1. Click **Push to Orgs**.<br/><img src={useBaseUrl('img/manage/subscriptions/mssp-orgs-sync-selected-items-csiem.png')} alt="Push Selected Items button" style={{border: '1px solid gray'}} width="800"/>
4850
1. On the **Push Selected Content** box, navigate to the **Destinations** section to select the organizations to push the selected items to. You can push to all organizations, a single child organization, or multiple child organizations.<br/><img src={useBaseUrl('img/manage/subscriptions/mssp-orgs-sync-selected-items-2-csiem.png')} alt="Push Selected Items dialog" style={{border: '1px solid gray'}} width="400"/>
@@ -58,6 +60,7 @@ You can push the following:
5860
:::note
5961
Both **Scheduled Searches Connection** and **Scheduled Reports** will be available only when you select a library *folder*.
6062
:::
63+
* **Monitor notifications**. Select **Include and Update Notifications** to copy the alert notification to the target organization. If the notification does not already exist, it will be created automatically. Select **Ignore Notifications** to exclude the alert notification, resulting in monitors being pushed without any active notifications.
6164

6265
### Limitations
6366

@@ -75,6 +78,7 @@ You can push the following:
7578
- Expected runtime for nearly 3000 async calls is 15 mins.
7679
- Make sure you keep the Child orgs per job less than or equal to 3 when you push more than 250 rules for a faster runtime.
7780
- Make sure you keep the rule or tuning expressions per job less than or equal to 500 for a faster runtime.
81+
- When pushing monitors, certain configurations will not be included. These include muting schedules, Sumo Logic Cloud SOAR connection, SLO linkages, Automation Service playbooks, HipChat settings, and tags.
7882

7983

8084
## View history
-16.3 KB
Loading

0 commit comments

Comments
 (0)