Documentation Updates

Date Description
Mar 31, 2026 Added information about triaging alerts using the enhanced UI experience.
Mar 4, 2026 Restructured the documentation on Using Alerts for better readability and improved reader experience.
Feb 24, 2026 Added information about ingestion interval for Google SecOps logs and resource framework sharing and permissions for Data Onboarding and Log Source Management.
Jan 9, 2026 Updated the Google SecOps document to remove redundant setup steps.
Jan 6, 2026 Added information about ingestion support for Google SecOps logs.
Nov 4, 2025 Added information about supporting several new log sources in the Supported Log Sources (Limited Availability) documentation.
Oct 30, 2025 Combined the Telemetry Log Summary page and the Supported Log Sources page to have one unified list of all log sources, irrespective of log ingestion methods.
Oct 26, 2025 Revived the Telemetry Log Summary page on request by EU partners.
Oct 23, 2025 Added information about the informational status in the alert action menu.
Oct 8, 2025 Updated What's New to conform to the new What's New document template.
Oct 6, 2025 Added links to the Log Source Management documents to establish cross-links between Search and Security Analytics.
Oct 3, 2025 Added information about the alert DCR schema for alerts forwarded to Azure Sentinel.
Sep 26, 2025 Added information about the ability to attach a PDF to an email alert.
Aug 26, 2025 Removed information related to the deprecation of the Data Usage Dashboard
Aug 6, 2025 Added information about limitations regarding alerts that are sent to webhooks.
Jul 31, 2025 Added information about the origin column in the audit table.
Jul 30, 2025 Added information about critical alerts to assign higher priority to critical alerts.
Jul 16, 2025 Updated information about the supported log source parsers.
Jul 16, 2025 Added the correct links to the Job Tracking and Alert Triage page from their respective portal Help pages.
Jul 14, 2025 Added information about the Security Analytics data retention policy.
Jul 14, 2025 Added information about the ability to use API calls as a new method of log ingestion.
Jun 24, 2025 Added information about deprecating the retrosearch API and using the search jobs API along with turbosearch.
Jun 4, 2025 Added information about the ability to forward alert payloads to S3 when you create an search event alert.
May 5, 2025 Added information about log source management that allows users to ingest event telemetry data from various log sources using one or more ingestion methods.
Feb 20, 2025 Added information about adding an alert triage when user creates search event alerts.
Feb 12, 2025 Added information about dashboard actions now being auditable.
Feb 6, 2025 Added information about webhooks supporting custom JSON payloads when forwarding matches to third-party services
Jan 29, 2025 Added information about auditing user actions on dashboards.
Jan 8, 2025 Added information about using cron expressions to schedule alerts and their frequency.
Nov 14, 2024 Admins can map users groups to roles to control how far back in time a user can search event log data.
Nov 11, 2024** Admins can audit user activity in their organization for insight into the history of different user actions.**
Sep 23, 2024 Added information about ingesting logs from Office 365.
Sep 11, 2024 Added support for NXLog.
Sep 4, 2024 Updated information about backfilling of events older that 24 hours ingested via Anomali Cloud Link.
Aug 23, 2024 Added support for Cribl.
Aug 20, 2024 Added support for forwarding all types of alerts to Azure.
Aug 14, 2024 Added throttling configuration for Event Search alerts.
Jul 24, 2024 Added support for forwarding Event Search alerts to third parties via webhooks.
Jul 18, 2024 Added the Append to existing table feature to the CSV Import tab. The feature allows you to add rows to an existing lookup table.
Apr 29, 2024 Added information about ingesting logs via HTTP Upload.
Apr 24, 2024 Anomali Security Analytics is the new name for Anomali Match Cloud.