DOCS-1548 - Mobot, Example Prompts, AI/ML FAQ | GA docs by kimsauce · Pull Request #6897 · SumoLogic/sumologic-documentation

kimsauce · 2026-07-13T17:50:41Z

Purpose of this pull request

This pull request moves Mobot from Preview to GA, and updates the shared Dojo AI FAQ doc to match. Includes the Aug 3 release notes for Mobot.

Note: SOC Analyst Agent GA was originally bundled into this branch, but its release date (Aug 3) diverged from Mobot's (today), so that content has been split out to #6971, targeting main directly for Aug 3. Mobot release notes pulled out as well and will go out with MCP server reelase notes 7/30.

Mobot (`docs/search/mobot/`)

Unified interface: no more selecting Query Agent vs. Knowledge Agent — one Ask Something field routes automatically. The two agents still exist behind the scenes, renamed to Log Analysis Agent and Platform Optimization Agent.
Added conversational content creation: Conversational Monitors is live; Conversational Dashboards and Conversational Playbooks are written but hidden behind HTML comments pending their own GA signals from Twisa.
Added unstructured log support without required Field Extraction Rules (prioritizing sources already used in dashboards).
Split mobot.md into mobot/index.md + mobot/mobot-example-prompts.md, with a new "Use cases" section, resequenced "Key capabilities," and a homepage screenshot added per review feedback.
Deleted mobot-preview.md now that its content lives in mobot/index.md, with a 301 redirect added to cid-redirects.json.
Updated the site announcement banner (docusaurus.config.js) and homepage/search landing card blurbs (docs/get-started/index.md, docs/search/index.md) to reflect the new positioning.
Updated the "Audit Mobot queries" section with the confirmed audit query and search-usage query, per Twisa.
New microlesson: "Using Mobot for Log Analysis." New release note: blog-service/2026-08-03-search.md.

AI/ML FAQ (`docs/get-started/ai-machine-learning.md`)

Updated agent names and descriptions to match the Mobot changes above (Query Agent → Log Analysis Agent, Knowledge Agent → Platform Optimization Agent).
Updated the MCP server description from "coming soon" to generally available and self-service.
SOC Analyst Agent is referred to as GA in this FAQ a few days early, per PM sign-off — but the "Summary Agent" section and its doc (insight-summary.md) stay live, and the FedRAMP availability FAQ (which names the SOC Analyst Agent) stays hidden, since neither is accurate until SOC Analyst Agent actually GAs on DOCS-1565 - SOC Analyst Agent GA - Docs and release notes #6971. That PR includes the follow-up to remove Summary Agent and un-hide the FedRAMP FAQ once it merges.
Added FAQ entries covering the agent renames, Feature Management-based opt-out, and Dojo AI usage auditing with a confirmed audit query.

Select the type of change

Minor Changes - Typos, formatting, slight revisions
Update Content - Revisions, updating sections
New Content - New features, sections, pages, tutorials
Site and Tools - .clabot, version updates, maintenance, dependencies, new packages for the site (Docusaurus, Gatsby, React, etc.)

Ticket (if applicable)

https://sumologic.atlassian.net/browse/DOCS-1548
https://sumologic.atlassian.net/browse/DOCS-1770

SOC Analyst Agent GA tracked separately in #6971 (https://sumologic.atlassian.net/browse/DOCS-1565).

To see the specific tasks where the Asana app for GitHub is being used, see below:

Replace the Query Agent/Knowledge Agent selection UI with the unified single-field conversational interface from the Mobot preview, merged with the existing GA doc's deeper technical content (sample queries, chart-type rules, RBAC notes, audit query, FAQ). Adds unstructured log support without required Field Extraction Rules, and clarifies that data questions are scoped to log data only. Delete mobot-preview.md now that its content lives in mobot.md, with a redirect to preserve the old URL. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Consolidate the Query Agent/Knowledge Agent-era structure into the unified interface: split Getting started into a fast path plus a separate "How Mobot responds" behavior section, merge the three Example workflow H2s into one, split "Working with Mobot" into log-specific and general-conversation sections, and reorganize Example prompts to match the product's own in-UI taxonomy (General, Security, Observability, Administration) instead of a persona split. Restore "At a glance" after over-trimming removed it along with "Who benefits from Mobot" - the persona list survives in the intro, but the quick-facts summary has GEO citation value the intro doesn't replace. Fix an orphaned RAG/dashboard-aware-translations reference in FAQ by reintroducing the concept in Key capabilities. Fix chart-type rules using raw enum casing (MAP, SVP, TABL/E) instead of the UI's Title Case names. Standardize "log data question" / "how-to question" terminology throughout, replacing several inconsistent variants. Drop a stale claim tying Example prompts' categories to the current welcome-screen UI, which will drift out of accuracy at the next UI update. Add sales-deck and in-product sample prompts as commented-out content under their matching categories, pending a product decision on which to publish. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Updated the description to emphasize troubleshooting and plain-language questions.

Document the Share with specific users and roles, See who has access, and Get sharable URL options in the Share Conversation dialog, not just the URL-copy shortcut. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…st Agent doc Flag the Example questions section for replacement with a link to Mobot's Example Prompts (Security analyst) section once #6897 merges, to avoid duplicating prompt content across docs. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…nd add Query/Knowledge Agent rename FAQ Add a Cloud SIEM insight entry point to Getting started, add an FAQ explaining the Query Agent/Knowledge Agent renames without overclaiming unreleased monitor/dashboard creation, flag paused Monitor Creation work for later, update the Mobot card on the search index page with the new icon and GA-focused blurb, and refresh the site announcement bar copy for Mobot GA. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

… Analyst framing Add the Aug 3 Search release note for Mobot GA. In mobot.md: remove the AI-addendum requirement (no longer required at GA), add the 10-prompt/ user/day limit (At a glance + FAQ), add a Cloud SIEM investigations capability that hands off from the SOC Analyst Agent (launched from an insight), fix the description, and use "plain language". Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…ocumentation into DOCS-1548-mobot-ga

…guage) Add the prompt definition, daily-limit reset behavior, and higher-limit request path to the prompt-limit FAQ; add a non-English language FAQ; and state the 60-day conversation retention window. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

… opt-out - Add Create and manage content section (conversational monitors, dashboards, playbooks) with known limitations - Add Memories subsection and reconcile the "no memory across sessions" limitation; add memory privacy note - Add FAQs for cost, AI addendum, Summary Agent, and non-deterministic answers; expand prompt-limit FAQ (Org ID, banner, UTC reset with Pacific example) - Document self-serve opt-out via Feature Management (with screenshot) - Clarify how to open the My Conversations panel - Release note: add content-creation capability bullet - Leave TODO markers for PM-pending items (memory scope/UI/RBAC, AI features toggle coupling) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

# Conflicts: # docs/search/index.md # docs/search/mobot.md # static/img/search/mobot/open-in-log-search.png

…docs Rename triage to investigate and capitalize SOC Analyst Agent per Oren's review, remove launch-promo language, and update AI Verdict screenshots and copy to match the redesigned insight UI. Also apply Twisa's Mobot feedback: add a Use cases section, resequence Key capabilities, rename "workflow(s)" to "conversation(s)" throughout, dedupe the Get Started instructions, and add a homepage screenshot to the intro. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…ocumentation into DOCS-1548-mobot-ga

kimsauce · 2026-07-29T06:06:02Z

@tp-sl — status on the rest of your Mobot feedback:

Section sequencing (Use cases → Capabilities → At a Glance): done — added a new Use cases section (Security / Observability / Platform administration / How-to questions, linking to the matching sections in Mobot Example Prompts) ahead of Key capabilities.
Capabilities rename/resequence: done — "Guided investigation" → "Guided analysis," reordered to match your list.
Screenshot on the first page: added a screenshot of the Mobot welcome screen right after the intro paragraph.
Getting Started section: examples updated, and deduped a redundant "how to open Mobot" instruction that had crept in.
Conversational Dashboards: hidden behind an HTML comment per your "don't publish yet" note — will uncomment when you give the green light.

Still open — Audit Mobot queries section: the doc currently filters on query_type in ("Query Agent"), but Query Agent was renamed to Log Analysis Agent for this GA. Can you check with eng whether the backend telemetry field also changed to "Log Analysis Agent", or still logs the old value? There's a standing TODO (DOCS-1548) in the doc on this. Also want to confirm whether the audit example should also cover how-to/Platform Optimization Agent queries, and whether _view=sumologic_search_usage_per_query and the linked search-audit-index doc are still the correct references.

kimsauce · 2026-07-29T06:06:15Z

@orensh81 — separately from the fixes above, I've got 4 open questions blocking publish on the SOC Analyst Agent doc that need your confirmation:

Permissions defaults — are View/Manage SOC Analyst Settings permissions granted to analysts by default, or only to administrators by default with analyst access enabled manually? The DOCS-1760 ticket language suggests the latter, which conflicts with what's currently written ("Viewing the settings is available to analysts and administrators").

OS--> Needs to be an admin to see it.

Volume & Overage Settings toggle — the ticket lists an Active/Disabled toggle for this section (similar to the Auto-Investigation Filter's), but it's not reflected in the doc. Does this exist in the shipped UI, or was it dropped before GA?

OS-->Yes it is on the UI

Capacity warning banner — does a banner appear on the Insights page when investigation capacity is reached? (This was in the UI RFC but hasn't been verified against the shipped UI.)

OS--> Yes we are shipping a banner warning.

Audit Event Index query — the "Can I audit the agent's activity" FAQ uses invocationdetails.agentname = "soc_analyst_agent", sourced from a Slack thread with the Mobot PM. The Audit Event Index doc doesn't document this field/value yet — can you confirm the exact field name and syntax with eng, and whether it needs its own row in that doc's Audited events table before we publish?

All 4 are marked with TODO comments in the doc source if you want to see them in context.

…d training resources Answer Oren's 4 outstanding TODOs (permissions defaults, Volume & Overage toggle, capacity banner, audit query) and Twisa's audit log query updates across the AI/ML FAQ, Mobot, and audit-event-index docs. Add the "Using Mobot for Log Analysis" microlesson, hide Conversational Playbooks pending its conditional-GO rollout, and fix leftover triage/promo language in the AI/ML FAQ doc for consistency with the rest of the GA copy. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…ublish SOC Analyst Agent doesn't ship until August 3, but this branch bundled its GA content in from an earlier merge. Revert soc-analyst-agent.md, the CSE hub cards, and both screenshots to main's current Public Preview state; remove the Aug 3 release note; and restore insight-summary.md (deleted on the assumption SOC GA would absorb it same-day) along with its sidebar entry and redirect removal, since Insight Summary is still a live, separate feature until SOC actually absorbs it. ai-machine-learning.md keeps its GA-framed SOC Analyst Agent content per PM sign-off (comfortable with early FAQ wording), but retains the Summary Agent section and drops the "absorbed into SOC Analyst Agent" FAQ claim, since that absorption hasn't happened yet. On Aug 3, that file needs a small follow-up: remove the Summary Agent section and restore the absorption FAQ bullet. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

The FedRAMP FAQ claims SOC Analyst Agent is available in FED deployments, which isn't confirmed until Aug 3. Hide it alongside the other SOC Analyst Agent GA content already deferred in this file. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…lish A broader audit (prompted by seeing these still listed in the PR) found 13 more static/img/cse images tied to the SOC Analyst Agent GA rewrite that the first split pass missed, since soc-analyst-agent.md's reverted text still referenced the same filenames as main but with different (GA-era) bytes, or referenced GA-only images that don't exist in main at all. Revert the former to main's content, delete the latter, and restore the Public-Preview-era images main still expects. Also revert a stale cross-reference in the Dec 31 2025 release note that had been repointed from insight-summary to soc-analyst-agent. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

…urce Point the Mobot announcement banner at the CDN-hosted image instead of a baseUrl-relative path so it renders correctly in production.

mafsumo

Review for Mobot, sample prompt and AI FAQ

…iew, training links - Align AI/ML FAQ wording with legal-approved copy (opt-out framing, third-party access, training-data answer link). - Single-source duplicated legal FAQ answers in the Mobot doc instead of keeping a second copy in sync. - Apply Mark's review: reworded intro line, fixed Academy training links and Wistia iframe ID, moved how-to prompts to the top of the example prompts page, and hid the Self-paced course link pending next week's launch.

Co-authored-by: mafsumo <166030078+mafsumo@users.noreply.github.com>

…ocumentation into DOCS-1548-mobot-ga

kimsauce self-assigned this Jul 13, 2026

cla-bot Bot added the cla-signed Contributor approved, listed in .clabot file label Jul 13, 2026

kimsauce added the doc:update Revisions and updates to content label Jul 13, 2026

kimsauce changed the title ~~DOCS-1548 - Move Mobot to GA with unified conversational interface~~ DOCS-1548 - Mobot GA ("v2": unified conversational interface) Jul 13, 2026

Merge branch 'main' into DOCS-1548-mobot-ga

ab5a4c7

kimsauce marked this pull request as ready for review July 13, 2026 19:09

kimsauce requested review from JV0812, amee-sumo and mafsumo as code owners July 13, 2026 19:09

kimsauce marked this pull request as draft July 13, 2026 19:10

kimsauce added the do-not-merge Pull requests that should not be merged label Jul 14, 2026

Revise Mobot description and keywords

db71815

Updated the description to emphasize troubleshooting and plain-language questions.

kimsauce marked this pull request as ready for review July 14, 2026 02:41

Merge branch 'main' into DOCS-1548-mobot-ga

f421dee

kimsauce requested a review from tp-sl July 15, 2026 01:53

DOCS-1548 - Expand Share conversation section with full dialog

bb41414

Document the Share with specific users and roles, See who has access, and Get sharable URL options in the Share Conversation dialog, not just the URL-copy shortcut. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

kimsauce commented Jul 15, 2026

View reviewed changes

Comment thread docusaurus.config.js Outdated

Apply suggestion from @kimsauce

87987e2

kimsauce changed the title ~~DOCS-1548 - Mobot GA ("v2": unified conversational interface)~~ DOCS-1548 - Mobot "v2"/UCI GA docs and release notes Jul 20, 2026

kimsauce and others added 3 commits July 20, 2026 04:54

Merge branch 'DOCS-1548-mobot-ga' of github.com:SumoLogic/sumologic-d…

0ad9ff4

…ocumentation into DOCS-1548-mobot-ga

kimsauce changed the title ~~DOCS-1548 - Mobot "v2"/UCI GA docs and release notes~~ DOCS-1548 - Mobot UCI GA docs and release notes Jul 20, 2026

kimsauce and others added 3 commits July 20, 2026 19:28

rm memory

262dec0

Merge remote-tracking branch 'origin/main' into DOCS-1548-mobot-ga

86197e4

# Conflicts: # docs/search/index.md # docs/search/mobot.md # static/img/search/mobot/open-in-log-search.png

kimsauce and others added 2 commits July 28, 2026 23:03

Merge branch 'DOCS-1548-mobot-ga' of github.com:SumoLogic/sumologic-d…

e83352c

…ocumentation into DOCS-1548-mobot-ga

kimsauce requested a review from orensh81 July 29, 2026 18:06

kimsauce and others added 3 commits July 29, 2026 11:17

kimsauce mentioned this pull request Jul 29, 2026

DOCS-1565 - SOC Analyst Agent GA - Docs and release notes #6971

Merged

4 tasks

kimsauce changed the title ~~DOCS-1548 - Mobot, SOC Analyst Agent, AI/ML FAQ | GA docs and release notes~~ DOCS-1548 - Mobot, Example Prompts, AI/ML FAQ | GA docs and release notes Jul 29, 2026

kimsauce and others added 3 commits July 29, 2026 12:16

DOCS-1548 - Reschedule Mobot blog post, fix announcement bar image so…

23671ff

…urce Point the Mobot announcement banner at the CDN-hosted image instead of a baseUrl-relative path so it renders correctly in production.

rm todo

8697a71

mafsumo reviewed Jul 29, 2026

View reviewed changes

kimsauce requested a review from mafsumo July 29, 2026 20:27

mafsumo approved these changes Jul 29, 2026

View reviewed changes

Comment thread docs/search/mobot/index.md Outdated

Comment thread docs/search/mobot/index.md Outdated

kimsauce and others added 6 commits July 29, 2026 13:36

Update docs/search/mobot/index.md

88a4bb9

Co-authored-by: mafsumo <166030078+mafsumo@users.noreply.github.com>

Update docs/search/mobot/index.md

fb4740c

Co-authored-by: mafsumo <166030078+mafsumo@users.noreply.github.com>

rm mobot RN

04a179b

Delete blog-service/2026-07-30-search.md

8e52498

newline

7050172

Merge branch 'DOCS-1548-mobot-ga' of github.com:SumoLogic/sumologic-d…

2e817ea

…ocumentation into DOCS-1548-mobot-ga

kimsauce changed the title ~~DOCS-1548 - Mobot, Example Prompts, AI/ML FAQ | GA docs and release notes~~ DOCS-1548 - Mobot, Example Prompts, AI/ML FAQ | GA docs Jul 29, 2026

kimsauce enabled auto-merge July 29, 2026 20:44

kimsauce added this pull request to the merge queue Jul 29, 2026

Merged via the queue into main with commit 1b6e855 Jul 29, 2026
4 checks passed

kimsauce deleted the DOCS-1548-mobot-ga branch July 29, 2026 20:53

JV0812 mentioned this pull request Jul 31, 2026

DOCS-1724 - Document Monitor Creation Agent in Mobot #6871

Merged

7 tasks

Navigation Menu

Uh oh!

DOCS-1548 - Mobot, Example Prompts, AI/ML FAQ | GA docs - #6897

DOCS-1548 - Mobot, Example Prompts, AI/ML FAQ | GA docs#6897
kimsauce merged 49 commits into
mainfrom
DOCS-1548-mobot-ga

kimsauce commented Jul 13, 2026 •

edited

Loading

Uh oh!

Uh oh!

kimsauce commented Jul 29, 2026

Uh oh!

kimsauce commented Jul 29, 2026 •

edited by orensh81

Loading

Uh oh!

mafsumo left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Uh oh!

Conversation

kimsauce commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Purpose of this pull request

Mobot (docs/search/mobot/)

AI/ML FAQ (docs/get-started/ai-machine-learning.md)

Select the type of change

Ticket (if applicable)

Uh oh!

Uh oh!

kimsauce commented Jul 29, 2026

Uh oh!

kimsauce commented Jul 29, 2026 • edited by orensh81 Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mafsumo left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

kimsauce commented Jul 13, 2026 •

edited

Loading

Mobot (`docs/search/mobot/`)

AI/ML FAQ (`docs/get-started/ai-machine-learning.md`)

kimsauce commented Jul 29, 2026 •

edited by orensh81

Loading