Documentation history

Sentries document expanded

Images and corrections

Added the missing diagram to the Parsers document (Japanese)
Added the missing images to the Pivots document (English, Japanese)
Corrected the data correlation menu and dialog names in the Pivots document (English)
Retook the screenshots in the User-Defined Filters document (English, Japanese)
Retook the screenshots in the Grid document (Korean, English, Japanese)

App documentation expanded

Rewrote the App Management document and retook its screenshots — added the Search apps and Upgrade an app sections, and corrected the objects deleted with an app
Added the App Mode document
Corrected the app run permission in the Account Permissions document

Policy, Users, and Settings chapters rewritten and screenshots retaken

Rewrote the Policy chapter documents and split the Playbooks document into 13 subsections
Rewrote the Users chapter documents and corrected the per-role permissions in the Account Permissions document
Added a caution that saving a user group with more than one page of members removes the members on the other pages
Rewrote the Settings chapter documents — added a section on moving tables between groups, and corrected the default node ports, the CA certificate validity, and the SSO settings values
Published the Cluster architecture diagrams and fixed a list display error
Corrected the names of the built-in log schemas, logger models, default rules, and glossary terms to the Korean names the product installs regardless of the installation language
Retook screenshots in other documents with the unified sample data

Policy documents rewritten and notation unified

Rewrote the Stream Rules and Batch Rules documents and retook their screenshots — added exception conditions sections and a batch rule simulation section
Unified the notation of on-screen strings and typed values

Screenshot standardization and document cleanup

Retook screenshots in the Dashboard, Logger, Analysis, Response, and other chapters with standard sample data and the dark theme
Rewrote the screen descriptions in the Dashboard, Analysis, and Response chapters
Added a section on the run scope and node specifiers to the Scheduled Queries document
Added a Sentry-only logger section to the Loggers document
Updated the Account Permissions document to the 5.0 baseline and moved it under the Users chapter
Corrected on-screen labels to match the web console
Corrected the system-table-partitions command form in the Tables document to use the table option — the previous form did not apply the table you specified
Noted that the suffix of the default name suggested when you duplicate a scenario or rule appears in Korean regardless of the locale

Feature updates and document cleanup

Documented the configurable password policy and the password requirements for reissuing a certificate (SNR#3212)
Corrected the Lookup document and retook the lookup and user-defined filter screenshots
Rewrote the Assets and Sites documents
Deleted the 4.0 documents left in the 5.0 guide

Improvements and corrections

Documented that deleting a user keeps the user's resources and transfers ownership to an administrator (SNR#3789)
Documented that running queries and tabs are restored within the same login session (SNR#3697)
Corrected the list of reserved login names

Documentation updates

Improvements and new features

Added per-user limits on concurrent queries and query result rows (SNR#3626)
Added bulk IP address entry and expiration times to address groups (SNR#3718)
Reworked the version history screen and the restore and duplicate flow of detection scenarios (SNR#3624)
Added the license expiration status to the ticket details screen (SNR#3638)
Added a loading state to the login button while an LDAP login is processed (SNR#3647)
Changed the show-more button in query result cells to appear based on character count instead of column width (SNR#3677)

Documentation enhancements

Added a pre-deployment preparation section for Sentries (network ports, JDK, and Sentry packages)
Updated the Certificates and Packages documents
Corrected the Tables document to match the 5.0 screens

Improvements and new features

Changed the default theme to dark (SNR#3617)
Added a System option to the theme switch (SNR#3572)
Added resizing of the tree and sidebar by dragging (SNR#3561)
Changed trees to always open with one level expanded (SNR#3576)
Added a result count limit option to the Queries screen (SNR#3581)
Shortened long values in query result cells, with the full content available through show-more (SNR#3498)
Changed the parser AI auto-generate button to appear only when its conditions are met (SNR#3548)
Improved the widget edit modal style and fixed alert box editing issues (SNR#3546)
Added the petabyte (PB) unit to the collection volume display (SNR#3494)
Changed the ticket icon in the top menu to appear or hide based on the license (SNR#3565)

Documentation structure improvements

New documents added

Added the MITRE ATT&CK, Intelligence (Security Feed, CVE, CWE, CAPEC), User-Defined Variables, Ticket Tags, Explanation Categories, Rule Categories, Signatures, and SSO documents