Sumo Logic

Sumo Logic is a cloud-based service for logs & metrics management for modern apps.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Users
  
  

Parameters

1. Sumo Logic Service URL (required, default: https://service.sumologic.com) - The Sumo Logic Service Endpoint (Login URL). See more info at Sumo Logic Endpoints.
2. Access ID and Access Key (required) - The Access ID and Access key for a user account that has permissions to fetch assets. See more info at Sumo Logic Access Key
3. Search Query (required) - The actual search to run in Sumo Logic. Each record (aggregation query result) that is returned from this search is presented as an asset.
4. Data Contains Users Information (required, default: False) - Select this option to consider the data from Sumo Logic query results as users data.
5. Data Contains Devices Information (required, default: False) - Select this option to consider the data from Sumo Logic query results as devices data.

6. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

7. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Number of days to fetch (required, default: 30) - The number of days to fetch devices.
2. Maximum amount of messages for search (required, default: 100000) - Limitation on the amount of returned results .
3. Consume raw messages (required) - Select whether to consume raw messages (query results) from Sumo Logic. If you select this option, each raw message is returned as an asset in Axonius. If not, only records are returned as assets.

APIs

Axonius uses the Search Job API.

Required Ports

• TCP port 443