DOCS-1724 - Document Monitor Creation Agent in Mobot

blog-service/2026-07-10-search.md

@@ -0,0 +1,12 @@
+---
+title: Create Monitors with Mobot (Search)
+image: https://assets-www.sumologic.com/company-logos/_800x418_crop_center-center_82_none/SumoLogic_Preview_600x600.jpg?mtime=1617040082
+keywords:
+  - mobot
+  - monitor
+  - dojo ai
+  - agent
+hide_table_of_contents: true
+---
+
+We're excited to introduce the **Monitor Creation Agent** in Mobot, which lets you create and update logs monitors from plain-language prompts instead of filling out the monitor form. Describe the monitor you want, review the suggested configuration, and confirm to create it. [Learn more](/docs/alerts/monitors/create-monitor-with-mobot).

docs/alerts/monitors/create-monitor-with-mobot.md

@@ -0,0 +1,111 @@
+---
+id: create-monitor-with-mobot
+title: Create Monitors with Mobot
+sidebar_label: Create Monitors with Mobot
+description: Use the Monitor Creation Agent in Mobot to create and update logs monitors from plain-language prompts, without filling out the monitor form manually.
+keywords:
+  - mobot
+  - monitor
+  - dojo ai
+  - agent
+  - monitor creation agent
+---
+
+import useBaseUrl from '@docusaurus/useBaseUrl';
+
+The **Monitor Creation Agent** lets you create monitors from plain-language prompts in [Mobot](/docs/search/mobot), Sumo Logic's conversational AI assistant. Describe the monitor you want in everyday language, and the agent validates your query, suggests a complete configuration, and creates the monitor after you confirm. You can also update a monitor within the same conversation.
+
+The agent supports logs monitors only, not metrics or SLO (Service Level Objective) monitors, and can create static, anomaly, and outlier detection types. From a single prompt, it populates the monitor name, description, query, trigger conditions, recovery conditions, and notifications, and you can accept or adjust each suggestion before the monitor is created.
+
+## Which monitor types does the agent support?
+
+The Monitor Creation Agent supports logs monitors only.
+
+| Monitor type | Supported |
+| :-- | :-- |
+| Logs | Yes |
+| Metrics | No |
+| SLO | No |
+
+For logs monitors, the agent can create the following detection types:
+
+- **Static**. Trigger when results cross a threshold you define.
+- **Anomaly**. Trigger on deviations from a machine learning baseline.
+- **Outlier**. Trigger when values fall outside the expected range for your logs.
+
+## What the agent can configure
+
+From your prompt, the agent suggests values for the following, and you can accept each suggestion or provide your own:
+
+- **Name** and **description**.
+- **Query** (validated before the configuration is suggested).
+- **Trigger conditions and thresholds**.
+- **Recovery conditions**.
+- **Notifications** through email or a connection.
+
+## How to create a monitor with Mobot
+
+1. Open [Mobot](/docs/search/mobot) and select the **Monitor Creation Agent**.<br/>{/* TODO: add screenshot of Monitor Creation Agent selected in Mobot */}
+1. Describe the monitor you want in plain language. For example:<br/>`Alert me when the payment-service query has more than 20 errors in a 5-minute window.`
+1. The agent validates your query and suggests a configuration, including name, description, monitor type, query, trigger, recovery, and notifications.<br/>{/* TODO: add screenshot of the suggested configuration card */}
+1. Review each suggestion. To change a value, tell the agent what you want. For example, ask it to rename the monitor or adjust the trigger threshold.
+1. (Optional) Add a notification. You can be notified by email or through a connection, such as Slack.
+   - If your organization has one connection, the agent adds it automatically.
+   - If your organization has more than one connection, the agent lists them and asks which to use.
+1. When the configuration looks right, the agent shows a confirmation card. Confirm to create the monitor.<br/>{/* TODO: add screenshot of the confirmation card */}
+1. The agent creates the monitor and returns its ID along with the configured conditions. Mobot also displays a chip for the new monitor. Click the chip to open the created monitor.
+
+The new monitor appears on the **Monitors** tab, the same as a monitor created through the form.
+
+## How to update a monitor in a conversation
+
+You can update a monitor you created earlier in the same conversation. Tell the agent what to change, and it shows a confirmation card summarizing the update before applying it.
+
+The agent can only update the following fields:
+
+- Name
+- Description
+- Query
+- Trigger conditions
+- Notifications
+- Query time range
+
+For example, ask the agent to change the trigger threshold from 20 to 15 and the time window to 7 minutes. The agent confirms that the threshold will change from 20 to 15 and the window will change to 7 minutes, and applies the update after you confirm.
+
+:::note
+The agent cannot disable or delete a monitor. To disable or delete a monitor, use the **Monitors** tab.
+:::
+
+## Example prompts
+
+- `Alert me when the payment-service query has more than 20 errors in a 5-minute window.`
+- `Create a monitor that notifies me by email when login failures exceed 100 in 10 minutes.`
+- `Notify my Slack channel when 5xx responses spike above the normal range.`
+
+## Frequently asked questions
+
+### Can the Monitor Creation Agent create metrics or SLO monitors?
+
+No. The agent creates logs monitors only. Use the monitor form to create metrics or SLO monitors.
+
+### What detection types can the agent create?
+
+The agent can create static, anomaly, and outlier detection types for logs monitors.
+
+### Can you edit a monitor after the agent creates it?
+
+Yes. You can update a monitor within the same conversation, or edit it later from the **Monitors** tab like any other monitor.
+
+### Does the agent validate your query before creating the monitor?
+
+Yes. The agent validates your query first, and then suggests the rest of the configuration, including name, description, trigger, recovery, and notifications.
+
+### How does the agent set up notifications?
+
+You can be notified by email or through a connection, such as Slack. If your organization has one connection, the agent adds it automatically. If you have more than one, the agent lists them and asks which to use.
+
+## Related resources
+
+- [Mobot](/docs/search/mobot)
+- [Create a New Monitor](/docs/alerts/monitors/create-monitor)
+- [AI and Machine Learning with Sumo Logic](/docs/get-started/ai-machine-learning)

docs/alerts/monitors/create-monitor.md

@@ -21,6 +21,10 @@ You can use Terraform to manage monitors with the [`sumologic_monitor`](https://
 <TerraformLink/>
 :::
 
+:::tip
+You can also create logs monitors from plain-language prompts with the Monitor Creation Agent in Mobot. For details, see [Create Monitors with Mobot](/docs/alerts/monitors/create-monitor-with-mobot).
+:::
+
 ## Open the New Monitor window
 
 There are several ways to create a new monitor, depending on where you are in Sumo Logic.

docs/search/mobot.md

@@ -16,18 +16,19 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
 
 Mobot is Sumo Logic's AI assistant that turns plain-language questions into log queries. Ask what you want to investigate and get query results, visualizations, and guided refinements in one conversational experience—without writing queries from scratch. Mobot tracks your intent, maintains conversation context, and surfaces step-by-step suggestions to move you from question to insight faster.
 
-Mobot connects you to two specialized agents:
+Mobot connects you to three specialized agents:
 
 * **Query Agent** translates your natural-language questions into log search queries and helps you refine them step by step.
 * **Knowledge Agent** answers how-to questions about Sumo Logic, from setup to troubleshooting, best practices, and more.
+* **Monitor Creation Agent** creates and updates logs monitors from plain-language prompts, so you do not have to fill out the monitor form manually.
 
 Together, these agents help you troubleshoot faster, explore your data more intuitively, and learn the platform without friction.
 
 ## At a glance
 
 - **What it is**: Sumo Logic's AI-powered assistant for log investigation and platform guidance.
-- **Two agents**: Query Agent (log search queries) and Knowledge Agent (how-to answers from official docs).
-- **How it works**: Ask questions in plain English; Mobot translates them into Sumo Logic queries or returns documentation-sourced answers.
+- **Three agents**: Query Agent (log search queries), Knowledge Agent (how-to answers from official docs), and Monitor Creation Agent (create logs monitors from prompts).
+- **How it works**: Ask questions in plain English; Mobot translates them into Sumo Logic queries, returns documentation-sourced answers, or builds a monitor configuration for you.
 - **Response time**: Typically under 2 seconds for most queries.
 - **Compatible log types**: JSON, partial JSON, and unstructured logs with Field Extraction Rules.
 - **AI provider**: Amazon Bedrock (no customer data used for training).
@@ -68,13 +69,13 @@ There are two ways to open Mobot:
 
 Not sure where to start? Choose an agent based on what you need:
 
-|      | Query Agent | Knowledge Agent |
-|:-----|:------------|:----------------|
-| **Purpose** | Create and refine log queries | Learn platform features |
-| **Input** | Data questions and analysis requests | How-to and configuration questions |
-| **Output** | Executable queries with live results | Answers with guidance links |
-| **Best for** | Troubleshooting, investigating, analyzing trends | Onboarding, setup guidance, learning concepts |
-| **Example** | "Show me 500 errors from the API service" | "How do I set up a CloudTrail collector?" |
+|      | Query Agent | Knowledge Agent | Monitor Creation Agent |
+|:-----|:------------|:----------------|:-----------------------|
+| **Purpose** | Create and refine log queries | Learn platform features | Create and update logs monitors |
+| **Input** | Data questions and analysis requests | How-to and configuration questions | A description of the monitor you want |
+| **Output** | Executable queries with live results | Answers with guidance links | A monitor configuration you confirm and create |
+| **Best for** | Troubleshooting, investigating, analyzing trends | Onboarding, setup guidance, learning concepts | Setting up alerting without the monitor form |
+| **Example** | "Show me 500 errors from the API service" | "How do I set up a CloudTrail collector?" | "Alert me when the payment-service query has more than 20 errors in 5 minutes" |
 
 ## Query Agent
 
@@ -451,6 +452,16 @@ To get the most accurate answers, try the following when asking questions:
 * **Follow up naturally**. If the initial answer is close but not quite right, ask follow-up questions like "What about for Azure instead of AWS?"
 * **Reference specific features**. Use proper names when you know them: "How do I use Field Extraction Rules?" works better than "How do I extract fields?"
 
+## Monitor Creation Agent
+
+Select **Monitor Creation Agent** to create monitors from plain-language prompts. Describe the monitor you want, and the agent validates your query and suggests a complete configuration, including name, description, monitor type, query, trigger, recovery, and notifications. You review the suggestions, make any changes, and confirm to create the monitor. You can also update a monitor within the same conversation.
+
+The agent supports logs monitors only (not metrics or SLO monitors), and can create static, anomaly, and outlier detection types.
+
+For example, you can prompt: `Alert me when the payment-service query has more than 20 errors in a 5-minute window.`
+
+For the full walkthrough, including how to update a monitor in the conversation and more example prompts, see [Create Monitors with Mobot](/docs/alerts/monitors/create-monitor-with-mobot).
+
 ## How does Mobot handle security and compliance?
 
 Sumo Logic Mobot leverages foundational models provided by Amazon Bedrock, inheriting their robust compliance and security posture. For detailed information, refer to the following Amazon Bedrock security and compliance resources:

sidebars.ts

@@ -1231,6 +1231,7 @@ module.exports = {
           items: [
             'alerts/monitors/overview',
             'alerts/monitors/create-monitor',
+            'alerts/monitors/create-monitor-with-mobot',
             'alerts/monitors/settings',
             'alerts/monitors/monitor-faq',
             'alerts/monitors/alert-variables',