Skip to content

Conversation

@JV0812
Copy link
Collaborator

@JV0812 JV0812 commented Nov 4, 2025

Purpose of this pull request

This pull request is to add information about multi-org search support for dashboards.

Select the type of change

  • Minor Changes - Typos, formatting, slight revisions
  • Update Content - Revisions, updating sections
  • New Content - New features, sections, pages, tutorials
  • Site and Tools - .clabot, version updates, maintenance, dependencies, new packages for the site (Docusaurus, Gatsby, React, etc.)

Ticket (if applicable)

Doc for MSSP - Multi Child Org Support for Dashboard

@cla-bot cla-bot bot added the cla-signed Contributor approved, listed in .clabot file label Nov 4, 2025
@JV0812 JV0812 self-assigned this Nov 4, 2025
@JV0812 JV0812 marked this pull request as draft November 4, 2025 10:19
Updated error handling descriptions and corrected link to Log Search page.
@JV0812 JV0812 marked this pull request as ready for review November 20, 2025 10:51
@JV0812 JV0812 added the do-not-merge Pull requests that should not be merged label Nov 20, 2025

There can be two possible errors while running the multi-child org queries:

- **Partial success**. This occurs when you run a query across all child orgs, and while some child orgs successfully execute, one or more encounter failures. Despite the failures, dashboard with aggregate results from the successfully executed child orgs will be displayed. To resolve the failure, refer to the audit logs (`_index=sumologic_system_events`) for detailed information on the failure query.
Copy link
Collaborator

@jpipkin1 jpipkin1 Nov 20, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- **Partial success**. This occurs when you run a query across all child orgs, and while some child orgs successfully execute, one or more encounter failures. Despite the failures, dashboard with aggregate results from the successfully executed child orgs will be displayed. To resolve the failure, refer to the audit logs (`_index=sumologic_system_events`) for detailed information on the failure query.
- **Partial success**. This occurs when you run a query across all child orgs, and while some child orgs successfully execute, one or more encounter failures. Despite the failures, the dashboard with aggregate results from the successfully executed child orgs will be displayed. To resolve the failure, refer to the audit logs ([`_index=sumologic_system_events`](/docs/manage/security/audit-indexes/system-event-index/)) for detailed information on the failure query.

Copy link
Collaborator

@jpipkin1 jpipkin1 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, @JV0812.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla-signed Contributor approved, listed in .clabot file do-not-merge Pull requests that should not be merged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants