---
slug: /cse/records-signals-entities-insights
title: Records, Signals, Entities, and Insights
description: Understand how Sumo Logic Cloud SIEM uses records, signals, and entities to detect threats and generate meaningful insights.
canonical: https://www.sumologic.com/help/docs/cse/records-signals-entities-insights/
---

Learn about insight generation, working with entities, and how to query Cloud SIEM records. 

import useBaseUrl from '@docusaurus/useBaseUrl';

In this section, we'll introduce the following concepts:

<div className="box-wrapper">
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/set-insight-generation-window-threshold')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>Insight Generation Settings</h4></a>
  <p>Learn how to configure the detection window and the threshold activity score for insight generation.</p>
  </div>
</div>
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/global-intelligence-security-insights')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>Global Intelligence for Security Insights</h4></a>
  <p>Learn how to triage and prioritize insights.</p>
  </div>
</div>
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/configure-custom-insight')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>Custom Insights</h4></a>
  <p>Learn how to set up custom insight configurations.</p>
  </div>
</div>
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/view-manage-entities')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>View and Manage Entities</h4></a>
  <p>Learn about all the entities in Cloud SIEM and their activity scores.</p>
  </div>
</div>
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/entity-criticality')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>Entity Criticality</h4></a>
  <p>Learn how to adjust the severity of signals for specific entities.</p>
  </div>
</div>
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/create-custom-entity-type')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>Custom Entity Types</h4></a>
  <p>Learn how to create custom entity types in Cloud SIEM.</p>
  </div>
</div>
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/create-an-entity-group')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>Entity Groups</h4></a>
  <p>Learn how to automatically group entities in terms of criteria like name or IP address.</p>
  </div>
</div>
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/configure-entity-lookup-table')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>Entity Lookup Tables</h4></a>
  <p>Learn how to normalize the names of users and hosts (machines) in your environment.</p>
  </div>
</div>
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/view-records-signal')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>View Records for a Signal</h4></a>
  <p>Learn how to view records associated with a signal in Cloud SIEM.</p>
  </div>
</div>
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/about-signal-suppression')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>Signal Suppression</h4></a>
  <p>Learn about ways to suppress and exclude Cloud SIEM signals from the insight generation process.</p>
  </div>
</div>
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/search-cse-records-in-sumo')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>Search Sumo Logic for Cloud SIEM Records</h4></a>
  <p>Learn to search the Sumo Logic platform for records and signals that have been forwarded from Cloud SIEM.</p>
  </div>
</div>
<div className="box smallbox card">
  <div className="container">
  <a href={useBaseUrl('docs/cse/records-signals-entities-insights/tags-insights-signals-entities-rules')}><img src={useBaseUrl('img/icons/security/siem-challenges.png')} alt="Icon of a shield on a flow diagram" width="40"/><h4>Using Tags</h4></a>
  <p>Learn how to add context to Cloud SIEM items, and search and filter items by tag.</p>
  </div>
</div>
</div>