About the Sumo Logic Cloud SIEM Integration
Sumo Logic Cloud SIEM is Sumo Logic’s cloud-native security information and event management platform, providing automated threat detection, investigation, and response capabilities optimized for cloud-first and hybrid environments. Part of Synqly’s SIEM Unified API, the Sumo Logic Cloud SIEM integration enables security teams to route normalized security event data from Synqly-connected tools into Sumo Logic’s detection and analytics engine through a standardized connector. Integrate with Sumo Logic Cloud SIEM to centralize security telemetry from across your stack into Sumo Logic’s platform, enabling cloud-scale threat detection and security operations workflows.
Integration Use Cases
Get Alert
Retrieves an alert by ID.
Get Investigation
Retrieves an investigation by ID.
Patch Investigation
Updates an investigation by ID.
Post Events
Writes a batch of `Event` objects to the SIEM configured with the token used for authentication.
Query Alerts
Queries alerts from the SIEM configured with the token used for authentication.
Query Events
Queries events from the SIEM configured with the token used for authentication.
Query Investigations
Queries investigations
Query Log Providers
Queries available log providers in the source SIEM
