Sumo Logic Integration

The Sumo Logic integration provides InsightCloudSec with the ability to generate events in your Sumo Logic account. The goal of this integration is to leverage InsightCloudSec capabilities to provide unified visibility across your environment.

• For general information about Integrations (editing and deleting), refer to the Integrations Overview page.
• If you need help with this integration, contact us through the Customer Support Portal.

Prerequisites and Requirements

Before getting started with this integration, ensure you have the following:

• Domain or Org Admin permissions within InsightCloudSec
• Familiarity and appropriate permissions for Sumo Logic
• Required Sumo Logic configuration details to complete the integration:
  • Unique HTTPS Source URL

InsightCloudSec Setup

These steps assume that you have a functional Sumo Logic implementation and HTTPS Source to integrate with InsightCloudSec. Refer to the Sumo Logic documentation for specific details on configuration of any Sumo Logic components.

To integrate your existing Sumo Logic setup, refer to the following steps:

1. Within InsightCloudSec navigate to Administration > Integrations.
2. Locate the Sumo Logic card on the Integrations landing page and select Edit.
3. Complete the integration form with the applicable details as follows:
   • Unique HTTPS Source URL
   • Optionally, select Send Product API Activity. This will send InsightCloudSec API activity to Sumo Logic as well.
4. Click Save to complete the integration.

Functional Details

After the integration is configured, you'll need to create a Bot with the Sumo Logic event action selected. Then, any time the Bot runs, it will generate an event in Sumo Logic: