Skip to main content

Sumologic Sumologic

Sumo Logic is a cloud-native, machine data analytics platform that provides comprehensive log management, monitoring, security analytics, and observability capabilities for modern cloud and hybrid environments. As a Security Information and Event Management (SIEM) and log aggregation solution, Sumo Logic collects, indexes, and analyzes machine-generated data from applications, infrastructure, security devices, and cloud platforms to provide real-time insights into operational performance, security threats, and compliance requirements.

CategorySIEM
DirectionQuery source
Sign-inNone
Query languagesSTIX
Websitesumologic.com

Before you start​

warning

The setup page can't take credentials for Sumologic Sumologic yet. Create the connection, then contact Huntbase support to finish signing it in.

Watch out for
  • You can only select scopes that match capabilities your own role has.
  • US1 accounts sign in at service.sumologic.com, which has no region code, and the value to enter for US1 isn't documented.

For the vendor's own instructions, see Sumo Logic access keys documentation.

Connect Sumologic Sumologic​

  1. Go to Connections and click New connection, or click New connection on the Sumologic Sumologic product page.
  2. On Product, pick Sumologic Sumologic and choose the Owner.
  3. On Details, give the connection a Name and, optionally, a Description.
  4. On Connect, fill in the settings and credentials described below.
  5. On Verify, review the summary and click Create & check.

For everything else on the setup page — saving a draft, I'll do this later, and what each check result means — see Connections.

Settings​

Where your Sumologic Sumologic lives:

FieldRequiredNotes
RegionYesYour deployment's region code, such as us2, eu or au. Look for it in your login URL, such as service.us2.sumologic.com.

Query it​

Once connected, Sumologic Sumologic can serve these languages in a query tab, and Scout can use it when you ask in Auto:

LanguageUse it for
STIXSTIX patterns for indicator sweeps, translated into the product's native search.

Next steps​