First wins (30 minutes)

If you’re onboarding a new environment, aim for these milestones.

​

1) Operator: triage an alert → open a case

• Go to Incident Management → Alerts
• Open an alert and review the context
• Create or link a Case

Docs: Incident alerts · Incident cases Video track: Operator track

​

2) Admin: provision a customer

Provision a tenant and verify it appears correctly in the Customers view. Docs: Customer provisioning

​

3) Admin: connect an integration / connector

Connect at least one data source and verify it shows up in CoPilot. Docs:

• 3rd‑party integrations
• Network connectors

​

4) Validate indices and retention

Make sure the backing indices/patterns exist and data is landing where expected. Docs: Indices management