Question about Team use of Sumo
A problem we have with Sumo is that when a user sets up an alert on a search but others on the team cannot modify it. Perhaps they have it send to Pager Duty to alert the whole team. Then the alert is firing and we determine it should not page the team. But only the original user who set it up can change the alert.
I wish there was something like a Team Role, where we all setup alerts in a common area and could modify each others alerts.
We all duplicate searches and alerts or have slight variations of each others searches. But at the Team level it would be nice to have a definitive, team approved and maintained folder of searches and alerts.
Granted, its useful to be able to have your own searches, but it would also be very valuable for this to be able to be more centrally managed as team assets.
Yes you can share a folder, and give others access. But even then, i don't believe you can edit the schedules or alerts on a search. This just doesn't scale that well; it doesn't work that well as a whole team solution. We're all doing our own thing.
This is one of the few things I don't like about Sumo. But perhaps this is because we use Sumo wrong; maybe there are solutions. Any ideas or suggestions?
-
Official comment
Scott,
Everything in your wish list exists today but takes a little bit of setup by you or an administrator to make it something useful for your entire organization.
I recommend using the Content Admin Mode detailed here: https://help.sumologic.com/Manage/Content_Sharing/Admin_Mode to create "Admin Recommended folders" per team/function giving appropriate read/edit/manage access to the roles or individuals as appropriate to your organization. This would give a static folder structure for teams to place their team content in, and by giving the entire role/other individuals edit access the schedule can be modified as well.
Comment actions
Please sign in to leave a comment.
Comments
2 comments