Sumo Logic Integration

The Sumo Logic integration provides Cloud Security (InsightCloudSec) with the ability to generate events in your Sumo Logic account. The goal of this integration is to leverage Cloud Security (InsightCloudSec) capabilities to provide unified visibility across your environment.

• For general information about Integrations (editing and deleting), refer to the Integrations Overview page.
• If you need help with this integration, contact us through the Customer Support Portal .

Prerequisites and Requirements

Before getting started with this integration, ensure you have the following:

• Domain or Org Admin permissions within Cloud Security (InsightCloudSec)
• Familiarity and appropriate permissions for Sumo Logic
• Required Sumo Logic configuration details to complete the integration:
  • Unique HTTPS Source URL

Cloud Security (InsightCloudSec) Setup

These steps assume that you have a functional Sumo Logic implementation and HTTPS Source to integrate with Cloud Security (InsightCloudSec). Refer to the Sumo Logic documentation  for specific details on configuration of any Sumo Logic components.

To integrate your existing Sumo Logic setup, refer to the following steps:

1. Within Cloud Security (InsightCloudSec) navigate to Settings > Integrations.
2. Locate the Sumo Logic card on the Integrations landing page and select Edit.
3. Complete the integration form with the applicable details as follows:
   • Unique HTTPS Source URL
   • Optionally, select Send Product API Activity. This will send Cloud Security (InsightCloudSec) API activity to Sumo Logic as well.
4. Click Save to complete the integration.

Functional Details

After the integration is configured, you’ll need to create a Bot with the Sumo Logic event action selected. Then, any time the Bot runs, it will generate an event in Sumo Logic: