Skip to content

Add Sentinel and Splunk troubleshooting pages - #33047

Draft
ngayerie wants to merge 3 commits into
productionfrom
ngayerie/sentinel-splunk-troubleshooting-dee-3780
Draft

Add Sentinel and Splunk troubleshooting pages#33047
ngayerie wants to merge 3 commits into
productionfrom
ngayerie/sentinel-splunk-troubleshooting-dee-3780

Conversation

@ngayerie

@ngayerie ngayerie commented Aug 26, 2026

Copy link
Copy Markdown
Collaborator

What

Adds dedicated troubleshooting pages for the Microsoft Sentinel and Splunk analytics integrations.

  • Converts sentinel.mdx and splunk.mdx into folder-based sections so each integration can carry child pages. Public URLs are unchanged.
  • Adds sentinel/troubleshooting.mdx covering Microsoft Entra admin consent, ARM template deployment errors, CloudflareV2_CL schema updates, and DCR datatype / reserved-name mismatches.
  • Adds splunk/troubleshooting.mdx covering cloudflare:json timestamp parsing for Firewall Events and the deprecated WAF dashboard fields removed in the Feb 2023 security fields update.

Why

Recurring issues in these integrations that aren't covered by the current install-only guides. Follows the troubleshooting content type — per-symptom entries with Cause / Fix / Verify.

DEE-3780

DEE-3780

Convert sentinel.mdx and splunk.mdx into folder-based sections and add
a troubleshooting.mdx page for each. The support-scope callout is
placeholder wording pending Product review.
@github-actions github-actions Bot added size/m product:analytics Related to Analytics product labels Aug 26, 2026
@github-actions

Copy link
Copy Markdown
Contributor

This pull request requires reviews from CODEOWNERS as it changes files that match the following patterns:

Pattern Owners
/src/content/docs/analytics/ @soheiokamoto, @angelampcosta, @rianvdm, @cloudflare/product-owners

@github-actions

Copy link
Copy Markdown
Contributor

This PR changes current filenames or deletes current files. Make sure you have redirects set up to cover the following paths:

  • /analytics/analytics-integrations/sentinel/
  • /analytics/analytics-integrations/splunk/

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Aug 26, 2026

Copy link
Copy Markdown

🚀 Deploying Preview to Cloudflare 🚀

Preview URL: https://ngayerie-sentinel-splunk-troubleshooting-dee-37.previews.developers.cloudflare.com (commit 204bdb7)

This URL reflects your latest Preview deployment

Preview Deployments by commit

Status Deployment URL Commit Updated (UTC) See this deployment's details
  • Build: Success ✅
  • Deployment: Success ✅

View logs ↗
https://3b21a3e4.previews.developers.cloudflare.com 204bdb7 2026-08-27T09:27:42.361Z Visit the dashboard ↗
  • Build: In progress 🔵

View logs ↗
2b3ad60 2026-08-27T09:15:14.626Z View logs ↗
  • Build: Success ✅
  • Deployment: Success ✅

View logs ↗
https://69edd8d5.previews.developers.cloudflare.com ef95bce 2026-08-26T17:59:26.233Z Visit the dashboard ↗

Copy link
Copy Markdown
Collaborator Author

[AI] Re: the filename-change flag — no _redirects entries are needed for these two files. The renames only move the existing content from foo.mdx to foo/index.mdx, which Astro/Starlight resolves to the same route:

  • sentinel.mdx/analytics/analytics-integrations/sentinel/
  • sentinel/index.mdx/analytics/analytics-integrations/sentinel/ (unchanged)

Same for Splunk. The rename is structural so each integration can host child pages (starting with troubleshooting/) without further URL changes.

- Fields missing/null: put 'upgrade the CCF solution' first, fall
  back to manual DCR/table edits. Mention BotDetectionIDs / dynamic.
- New entry: CCF solution workbook does not populate (legacy
  Cloudflare_CL / CloudflareDataConnector references).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

product:analytics Related to Analytics product size/m

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants