New
- Proactive key suggestions: We added Proactive Key Suggestions, so that when you are crafting search queries, you will be suggested relevant keys to include based on the logs you have selected.
- Notable events: We added a link from notable events on the Investigations Timeline to the underlying log evidence. This improved connection provides the basis for thorough investigations and improved decision making.
Improved
- Create Connection: We updated the Create Connection modal to include informational tooltips on fields.
- Settings: We updated the text on the Credential modals in the Settings page to be more helpful.
- Dashboards performance We improved how dashboard cards handle larger
groupby
andmultigroupby
results so analysts can quickly explore the data and make any changes to card configurations. - Log Search: We have rearranged the cards on the Log Search home tab so you can easily and quickly focus on the task at hand, such as running a recent or saved query.
Fixed
- We fixed an issue where applying filters to the Data Collection pages affected the page URL unexpectedly.
- We fixed an issue where non-applicable filters appeared on non-expiring and watchlist users pages.