Sumo Logic

Sumo Logic is a cloud-based service for logs & metrics management for modern apps.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Users
  
  

Parameters

1. Sumo Logic Service URL (required, default: https://service.sumologic.com) - The Sumo Logic Service Endpoint (Login URL). See more info at Sumo Logic Endpoints.
2. Access ID and Access Key (required) - The Access ID and Access key for a user account that has permissions to fetch assets. See more info at Sumo Logic Access Key
3. Search Query (required) - Actual search to run. The search query must extract fields according to the CSV Adapter logic.
4. Data Contains Users Information (required, default: False) - Select this option to consider the data from Sumo Logic query results as users data.
5. Data Contains Devices Information (required, default: False) - Select this option to consider the data from Sumo Logic query results as devices data.

6. Verify SSL (required, default: False) - Verify the SSL certificate offered by the value supplied in Sumo Logic Service URL. For more details, see SSL Trust & CA Settings.
   • If enabled, the SSL certificate offered by the value supplied in Sumo Logic Service URL will be verified against the CA database inside of Axonius. If the SSL certificate can not be validated against the CA database inside of Axonius, the connection will fail with an error.
   • If disabled, the SSL certificate offered by the value supplied in Sumo Logic Service URL will not be verified against the CA database inside of Axonius.
7. HTTPS Proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in Sumo Logic Service URL.
   • If supplied, Axonius will utilize the proxy when connecting to the value supplied in Sumo Logic Service URL.
   • If not supplied, Axonius will connect directly to the value supplied in Sumo Logic Service URL.
     7 For details on the common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Number of days to fetch (required, default: 30) - The number of days to fetch devices.
2. Maximum amount of messages for search (required, default: 100000) - Limitation on the amount of returned results .
3. Consume raw messages (required, default: False) - Select whether to consume raw messages from Sumo Logic.
   • If enabled, all connections for this adapter will consume raw messages from Sumo Logic.
   • If disabled, all connections for this adapter will not consume raw messages from Sumo Logic.
     

APIs

Axonius uses the Search Job API.

Required Ports

• TCP port 443