Sumo Logic website screenshot

Sumo Logic

Sumo Logic is a cloud-native, machine data analytics platform delivering real-time, continuous intelligence for operations, security, and business insights. It provides a comprehensive REST API with 289 endpoints spanning log analytics, dashboards, monitors, roles, users, metrics, traces, and more.

1 APIs 0 Features
LoggingObservabilitySecurityMonitoringAnalyticsDevOpsSIEM

APIs

Sumo Logic API

Sumo Logic REST API providing 289 endpoints for managing log analytics, users, roles, dashboards, monitors, connections, collectors, sources, search jobs, ingest budgets, partit...

Collections

GraphQL

Sumo Logic GraphQL Schema

This directory contains a conceptual GraphQL schema for the Sumo Logic cloud logging and monitoring platform, derived from the [Sumo Logic REST API v1](https://api.sumologic.com...

GRAPHQL

Pricing Plans

Sumo Logic Plans Pricing

3 plans

PLANS

Rate Limits

Sumo Logic Rate Limits

5 limits

RATE LIMITS

FinOps

Semantic Vocabularies

Sumo Logic Context

18 classes · 8 properties

JSON-LD

API Governance Rules

Sumo Logic API Rules

9 rules · 2 errors 5 warnings 2 info

SPECTRAL

JSON Structure

Sumo Logic User Structure

0 properties

JSON STRUCTURE

Example Payloads

Resources

👥
GitHubOrganization
GitHubOrganization
🔗
LinkedIn
LinkedIn
🌐
Portal
Portal
🔗
Documentation
Documentation
🔗
Reference
Reference
🔗
Website
Website
🚀
GettingStarted
GettingStarted
🟢
StatusPage
StatusPage

Sources

Raw ↑
opencollection: 1.0.0
info:
  name: Sumo Logic API
  version: 1.0.0
request:
  auth:
    type: basic
    username: '{{username}}'
    password: '{{password}}'
items:
- info:
    name: appManagement
    type: folder
  items:
  - info:
      name: List Available Apps.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/apps
    docs: Lists all available apps from the App Catalog.
  - info:
      name: Get An App By UUID.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/apps/:uuid
      params:
      - name: uuid
        value: ''
        type: path
        description: The identifier of the app to retrieve.
    docs: Gets the app with the given universally unique identifier (UUID).
  - info:
      name: Install An App By UUID.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/apps/:uuid/install
      params:
      - name: uuid
        value: ''
        type: path
        description: UUID of the app to install.
      body:
        type: json
        data: '{}'
    docs: Installs the app with given UUID in the folder specified using destinationFolderId.
  - info:
      name: App Install Job Status.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/apps/install/:jobId/status
      params:
      - name: jobId
        value: ''
        type: path
        description: The identifier of the asynchronous install job.
    docs: Get the status of an asynchronous app install request for the given job identifier.
- info:
    name: appManagementV2
    type: folder
  items:
  - info:
      name: Start App Install Job
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v2/apps/:uuid/install
      params:
      - name: uuid
        value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
        type: path
        description: UUID of the app to install.
      body:
        type: json
        data: '{}'
    docs: 'Schedule an asynchronous job to install the app with the given UUID and version from the App Catalog. The app will
      be installed in ''Installed Apps'' folder in the Content Library.


      _You get back an identifier of asynchronous job in response to this endpoint. You can then use the [app install status
      API](#operation/getAsyncInstallAppStatus) to get the status of the installation request. See [Asynchronous-Request](#section/Getting-Started/Asynchronous-Request)
      section for more details on how to wor'
  - info:
      name: App Install Job Status
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v2/apps/install/:jobId/status
      params:
      - name: jobId
        value: C03E086C137F38B4
        type: path
        description: Identifier of the asynchronous job for installing the app.
    docs: Get the status of an asynchronous app install request for the given job identifier.
  - info:
      name: Start App Uninstall Job
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v2/apps/:uuid/uninstall
      params:
      - name: uuid
        value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
        type: path
        description: UUID of the app to uninstall.
    docs: 'Schedule an asynchronous job to uninstall app with the given UUID.


      _You get back an identifier of asynchronous job in response to this endpoint. You can then use the [app uninstall status
      API](#operation/getAsyncUninstallAppStatus) to get the status of the uninstallation request. See [Asynchronous-Request](#section/Getting-Started/Asynchronous-Request)
      section for more details on how to work with asynchronous request._'
  - info:
      name: App Uninstall Job Status
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v2/apps/uninstall/:jobId/status
      params:
      - name: jobId
        value: C03E086C137F38B4
        type: path
        description: Identifier of the asynchronous job for uninstalling the app.
    docs: Get the status of an asynchronous app uninstall request for the given job identifier.
  - info:
      name: Start App Upgrade Job
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v2/apps/:uuid/upgrade
      params:
      - name: uuid
        value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
        type: path
        description: UUID of the app to upgrade.
      body:
        type: json
        data: '{}'
    docs: 'Schedule an asynchronous job to upgrade the app with the given UUID and version from the App Catalog. The app will
      be installed in ''Installed Apps'' folder in the Content Library.


      _You get back an identifier of asynchronous job in response to this endpoint. You can then use the [app upgrade status
      API](#operation/getAsyncUpgradeAppStatus) to get the status of the upgrade request. See [Asynchronous-Request](#section/Getting-Started/Asynchronous-Request)
      section for more details on how to work wit'
  - info:
      name: App Upgrade Job Status
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v2/apps/upgrade/:jobId/status
      params:
      - name: jobId
        value: C03E086C137F38B4
        type: path
        description: Identifier of the asynchronous job for upgrading the app.
    docs: Get the status of an asynchronous app upgrade request for the given job identifier.
  - info:
      name: List Apps
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v2/apps
      params:
      - name: name
        value: AWS%20CloudTrail
        type: query
        description: Name of the app.
      - name: author
        value: Sumo%20Logic
        type: query
        description: Author of the app.
    docs: List all apps from the App Catalog.
  - info:
      name: Get Details Of An App Version.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v2/apps/:uuid/details
      params:
      - name: uuid
        value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
        type: path
        description: UUID of the app.
      - name: version
        value: 1.0.0
        type: query
        description: Version of the app. The latest version is used if this is omitted or specified as "latest".
    docs: "Get details about an app with the given UUID and version. The details include:\n\n  1. The base URL for all the\
      \ resource for the app.\n  2. The app manifest"
  - info:
      name: Get Subscription Status For The User
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v2/apps/:uuid/subscription
      params:
      - name: uuid
        value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
        type: path
        description: UUID of the app.
    docs: Get Subscription status for the user for a specific app.  This will indicate whether the user has subscribed to
      the app or not.
  - info:
      name: Subscribe To An App Upgrade Notification
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v2/apps/:uuid/subscription
      params:
      - name: uuid
        value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
        type: path
        description: UUID of the app to subscribe to.
    docs: Subscribe to an app upgrade notification. This will allow the user to receive notifications for the app updates.
  - info:
      name: Unsubscribe From An App Upgrade Notification
      type: http
    http:
      method: DELETE
      url: https://api.au.sumologic.com/api/v2/apps/:uuid/subscription
      params:
      - name: uuid
        value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
        type: path
        description: UUID of the app to unsubscribe from.
    docs: Unsubscribe from an app. This will remove the user's subscription to notifications for the app.
- info:
    name: connectionManagement
    type: folder
  items:
  - info:
      name: Get A List Of Connections.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/connections
      params:
      - name: limit
        value: ''
        type: query
        description: Limit the number of connections returned in the response. The number of connections returned may be less
          than the `limit`.
      - name: token
        value: ''
        type: query
        description: Continuation token to get the next page of results. A page object with the next continuation token is
          returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
          of results. `token` is set to null when no more pages are left.
    docs: Get a list of all connections in the organization. The response is paginated with a default limit of 100 connections
      per page.
  - info:
      name: Create A New Connection.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/connections
      body:
        type: json
        data: '{}'
    docs: Create a new connection in the organization.
  - info:
      name: Test A New Connection Url.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/connections/test
      params:
      - name: functionalities
        value: alert,resolution
        type: query
        description: 'A comma-separated functionalities of webhook payload to test. Acceptable values: `alert`, `resolution`.'
      - name: connectionId
        value: 0000000000123ABC
        type: query
        description: Unique identifier of an existing connection to test. It should be provided when the request body of an
          existing connection contains masked authorization headers. If not provided, the authorization headers will not be
          correctly unmasked, and the test may fail due to unauthorized access.
      body:
        type: json
        data: '{}'
    docs: Test a new connection url is valid and can connect.
  - info:
      name: Get Incident Templates For CloudSOAR Connections.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/connections/incidentTemplates
      body:
        type: json
        data: '{}'
    docs: Get incident templates for CloudSOAR connections.
  - info:
      name: Get A Connection.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/connections/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of connection to return.
      - name: type
        value: ''
        type: query
        description: Type of connection to return. Valid values are `WebhookConnection`, `ServiceNowConnection`.
    docs: Get a connection with the given identifier.
  - info:
      name: Update A Connection.
      type: http
    http:
      method: PUT
      url: https://api.au.sumologic.com/api/v1/connections/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the connection to update.
      body:
        type: json
        data: '{}'
    docs: Update an existing connection.
  - info:
      name: Delete A Connection.
      type: http
    http:
      method: DELETE
      url: https://api.au.sumologic.com/api/v1/connections/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the connection to delete.
      - name: type
        value: ''
        type: query
        description: Type of connection to delete. Valid values are `WebhookConnection`, `ServiceNowConnection`.
    docs: Delete a connection with the given identifier.
- info:
    name: scheduledViewManagement
    type: folder
  items:
  - info:
      name: Get A List Of Scheduled Views.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/scheduledViews
      params:
      - name: limit
        value: ''
        type: query
        description: Limit the number of scheduled views returned in the response. The number of scheduled views returned
          may be less than the `limit`.
      - name: token
        value: ''
        type: query
        description: Continuation token to get the next page of results. A page object with the next continuation token is
          returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
          of results. `token` is set to null when no more pages are left.
    docs: Get a list of all scheduled views in the organization. The response is paginated with a default limit of 100 scheduled
      views per page.
  - info:
      name: Create A New Scheduled View.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/scheduledViews
      body:
        type: json
        data: '{}'
    docs: Creates a new scheduled view in the organization.
  - info:
      name: Get A Scheduled View.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/scheduledViews/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the scheduled view to fetch.
    docs: Get a scheduled view with the given identifier.
  - info:
      name: Update A Scheduled View.
      type: http
    http:
      method: PUT
      url: https://api.au.sumologic.com/api/v1/scheduledViews/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the scheduled view to update.
      body:
        type: json
        data: '{}'
    docs: Update an existing scheduled view.
  - info:
      name: Disable A Scheduled View.
      type: http
    http:
      method: DELETE
      url: https://api.au.sumologic.com/api/v1/scheduledViews/:id/disable
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the scheduled view to disable.
    docs: Disable a scheduled view with the given identifier.
  - info:
      name: Pause A Scheduled View.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/scheduledViews/:id/pause
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the scheduled view to pause.
    docs: Pause a scheduled view with the given identifier.
  - info:
      name: Start A Scheduled View.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/scheduledViews/:id/start
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the scheduled view to start.
    docs: Start a scheduled view with the given identifier.
  - info:
      name: Provides Information About Scheduled Views Quota.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/scheduledViews/quota
    docs: Every customer can use a limited number of scheduled views. This endpoint allows learning about these limitations
      and remaining quota.
- info:
    name: lookupManagement
    type: folder
  items:
  - info:
      name: Create A Lookup Table.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/lookupTables
      body:
        type: json
        data: '{}'
    docs: "Create a new lookup table by providing a schema and specifying its configuration. Providing parentFolderId\n is\
      \ mandatory. Use the [getItemByPath](#operation/getItemByPath) endpoint to get content id of a path.\nPlease check [Content\
      \ management API](#tag/contentManagement) and [Folder management API](#tag/folderManagement) for all available options."
  - info:
      name: Get A Lookup Table.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/lookupTables/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the lookup table.
    docs: Get a lookup table for the given identifier.
  - info:
      name: Edit A Lookup Table.
      type: http
    http:
      method: PUT
      url: https://api.au.sumologic.com/api/v1/lookupTables/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the lookup table.
      body:
        type: json
        data: '{}'
    docs: Edit the lookup table data. All the fields are mandatory in the request.
  - info:
      name: Delete A Lookup Table.
      type: http
    http:
      method: DELETE
      url: https://api.au.sumologic.com/api/v1/lookupTables/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the lookup table.
    docs: Delete a lookup table completely. <br> **Warning:** `This operation cannot be undone`.
  - info:
      name: Upload A CSV File.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/lookupTables/:id/upload
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the lookup table to populate.
      - name: merge
        value: ''
        type: query
        description: This indicates whether the file contents will be merged with existing data in the lookup table or not.
          If this is true then data with the same primary keys will be updated while the rest of the rows will be appended.
          By default, merge is false. The response includes a request identifier that you need to use in the [Request Status
          API](#operation/requestStatus) to track the status of the upload request.
      - name: fileEncoding
        value: ''
        type: query
        description: File encoding of file being uploaded.
      body:
        type: multipart-form
        data:
        - name: file
          type: text
          value: ''
    docs: Create a request to populate a lookup table with a CSV file.
  - info:
      name: Get The Status Of An Async Job.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/lookupTables/jobs/:jobId/status
      params:
      - name: jobId
        value: ''
        type: path
        description: An identifier returned in response to an asynchronous request.
    docs: Retrieve the status of a previously made request. If the request was successful, the status of the response object
      will be `Success`.
  - info:
      name: Empty A Lookup Table.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/lookupTables/:id/truncate
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the table to clear.
    docs: Delete all data from a lookup table.
  - info:
      name: Insert Or Update A Lookup Table Row.
      type: http
    http:
      method: PUT
      url: https://api.au.sumologic.com/api/v1/lookupTables/:id/row
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the lookup table.
      body:
        type: json
        data: '{}'
    docs: Insert or update a row of a lookup table with the given identifier. A new row is inserted if the primary key does
      not exist already, otherwise the existing row with the specified primary key is updated. All the fields of the lookup
      table are required and will be updated to the given values. In case a field is not specified then it will be assumed
      to be set to null. If the table size exceeds the maximum limit of 100MB then based on the size limit action of the table
      the update will be processed o
  - info:
      name: Delete A Lookup Table Row.
      type: http
    http:
      method: PUT
      url: https://api.au.sumologic.com/api/v1/lookupTables/:id/deleteTableRow
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the lookup table.
      body:
        type: json
        data: '{}'
    docs: Delete a row from lookup table by providing the row's primary keys' values. The complete set of primary key fields
      of the lookup table should be provided.
- info:
    name: partitionManagement
    type: folder
  items:
  - info:
      name: Get A List Of Partitions.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/partitions
      params:
      - name: limit
        value: ''
        type: query
        description: Limit the number of partitions returned in the response. The number of partitions returned may be less
          than the `limit`.
      - name: token
        value: ''
        type: query
        description: Continuation token to get the next page of results. A page object with the next continuation token is
          returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
          of results. `token` is set to null when no more pages are left.
      - name: viewTypes
        value: AuditIndex,Partition
        type: query
        description: "The type of partitions to retrieve. Valid values are:\n  1. `DefaultView`: To get General Index partition.\n\
          \  2. `Partition`: To get user defined views/partitions.\n  3. `AuditIndex`: To get the internal audit indexes.\
          \ Eg. sumologic_audit_events.\n\nMore than one type of partitions can be retrieved in same request."
    docs: Get a list of all partitions in the organization. The response is paginated with a default limit of 100 partitions
      per page.
  - info:
      name: Create A New Partition.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/partitions
      body:
        type: json
        data: '{}'
    docs: Create a new partition.
  - info:
      name: Get A Partition.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/partitions/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of partition to return.
    docs: Get a partition with the given identifier from the organization.
  - info:
      name: Update A Partition.
      type: http
    http:
      method: PUT
      url: https://api.au.sumologic.com/api/v1/partitions/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the partition to update.
      body:
        type: json
        data: '{}'
    docs: Update an existing partition in the organization.
  - info:
      name: Decommission A Partition.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/partitions/:id/decommission
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the partition to decommission.
    docs: Decommission a partition with the given identifier from the organization.
  - info:
      name: Cancel A Retention Update For A Partition
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/partitions/:id/cancelRetentionUpdate
      params:
      - name: id
        value: '1'
        type: path
        description: Identifier of the partition to cancel the retention update for.
    docs: Cancel update to retention of a partition for which retention was updated previously using `reduceRetentionPeriodImmediately`
      parameter as false
  - info:
      name: Provides Information About Partitions Quota.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/partitions/quota
    docs: Every customer can use a limited number of partitions. This endpoint allows learning about these limitations and
      remaining quota.
- info:
    name: logsDataForwardingManagement
    type: folder
  items:
  - info:
      name: Get Amazon S3 Data Forwarding Destinations.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/logsDataForwarding/destinations
      params:
      - name: limit
        value: ''
        type: query
        description: Limit the number of data forwarding destinations returned in the response. The number of data forwarding
          destinations returned may be less than the `limit`.
      - name: token
        value: ''
        type: query
        description: Continuation token to get the next page of results. A page object with the next continuation token is
          returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
          of results. `token` is set to null when no more pages are left.
    docs: Get a list of all Amazon S3 data forwarding destinations.
  - info:
      name: Create An S3 Data Forwarding Destination.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/logsDataForwarding/destinations
      body:
        type: json
        data: '{}'
    docs: Create a new Amazon S3 data forwarding destination.
  - info:
      name: Get An S3 Data Forwarding Destination.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/logsDataForwarding/destinations/:id
      params:
      - name: id
        value: '1'
        type: path
        description: Identifier of the S3 data forwarding destination to return.
    docs: Get an S3 data forwarding destination by the given identifier.
  - info:
      name: Update An S3 Data Forwarding Destination.
      type: http
    http:
      method: PUT
      url: https://api.au.sumologic.com/api/v1/logsDataForwarding/destinations/:id
      params:
      - name: id
        value: '1'
        type: path
        description: Identifier of the data forwarding destination to update.
      body:
        type: json
        data: '{}'
    docs: Update an S3 data forwarding destination by the given identifier.
  - info:
      name: Delete An S3 Data Forwarding Destination.
      type: http
    http:
      method: DELETE
      url: https://api.au.sumologic.com/api/v1/logsDataForwarding/destinations/:id
      params:
      - name: id
        value: '1'
        type: path
        description: Identifier of the data forwarding destination to delete.
    docs: Delete an existing Amazon S3 data forwarding destination with the given identifier.
  - info:
      name: Get All S3 Data Forwarding Rules.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/logsDataForwarding/rules
      params:
      - name: limit
        value: ''
        type: query
        description: Limit the number of data forwarding rules returned in the response. The number of data forwarding rules
          returned may be less than the `limit`.
      - name: token
        value: ''
        type: query
        description: Continuation token to get the next page of results. A page object with the next continuation token is
          returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
          of results. `token` is set to null when no more pages are left.
    docs: Get a list of all S3 data forwarding rules.
  - info:
      name: Create An S3 Data Forwarding Rule.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/logsDataForwarding/rules
      body:
        type: json
        data: '{}'
    docs: Create a data forwarding rule to send data from a Partition or Scheduled View to an S3 bucket.
  - info:
      name: Get An S3 Data Forwarding Rule By Its Index.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/logsDataForwarding/rules/:indexId
      params:
      - name: indexId
        value: '1'
        type: path
        description: The `id` of the Partition or Scheduled View.
    docs: Get the details of an S3 data forwarding rule by its Partition or Scheduled View identifier.
  - info:
      name: Update An S3 Data Forwarding Rule By Its Index.
      type: http
    http:
      method: PUT
      url: https://api.au.sumologic.com/api/v1/logsDataForwarding/rules/:indexId
      params:
      - name: indexId
        value: '1'
        type: path
        description: The `id` of the Partition or Scheduled View with the data forwarding rule to update.
      body:
        type: json
        data: '{}'
    docs: Update an S3 data forwarding rule by its Partition or Scheduled View identifier.
  - info:
      name: Delete An S3 Data Forwarding Rule By Its Index.
      type: http
    http:
      method: DELETE
      url: https://api.au.sumologic.com/api/v1/logsDataForwarding/rules/:indexId
      params:
      - name: indexId
        value: '1'
        type: path
        description: The `id` of the Partition or Scheduled View with the data forwarding rule to delete.
    docs: Delete an S3 data forwarding rule by its Partition or Scheduled View identifier.
- info:
    name: logSearchesManagement
    type: folder
  items:
  - info:
      name: List All Saved Log Searches.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/logSearches
      params:
      - name: limit
        value: '50'
        type: query
        description: Limit the number of log searches returned in the response. The number of log searches returned may be
          less than the `limit`.
      - name: token
        value: GDCiRv4vebF3UWFJQ1kySXBOR3Bzh69GR0RyWm9vCtc
        type: query
        description: Continuation token to get the next page of results. A page object with the next continuation token is
          returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
          of results. `token` is set to null when no more pages are left.
    docs: List all saved log searches viewable by the user.
  - info:
      name: Save A Log Search.
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/logSearches
      body:
        type: json
        data: '{}'
    docs: Save the log search in the content library.
  - info:
      name: Get The Saved Log Search.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/logSearches/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the saved log search.
    docs: Get a saved log search from the content library by identifier.
  - info:
      name: Update The Saved Log Search.
      type: http
    http:
      method: PUT
      url: https://api.au.sumologic.com/api/v1/logSearches/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the saved log search.
      body:
        type: json
        data: '{}'
    docs: Update the saved log search with the specified identifier. Partial update is not supported, you must provide values
      for all fields.
  - info:
      name: Delete The Saved Log Search.
      type: http
    http:
      method: DELETE
      url: https://api.au.sumologic.com/api/v1/logSearches/:id
      params:
      - name: id
        value: ''
        type: path
        description: Identifier of the saved log search.
    docs: Delete the saved log search from the content library.
- info:
    name: dataDeletionRules
    type: folder
  items:
  - info:
      name: Get A List Of Data Deletion Rules
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/dataDeletionRules
      params:
      - name: limit
        value: '100'
        type: query
        description: Limit the number of deletion Rules returned in the response
      - name: token
        value: ''
        type: query
        description: Continuation token to get the next page of results. A page object with the next continuation token is
          returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
          of results. `token` is set to null when no more pages are left.
    docs: Get a list of data deletion rules in the organization. The response is paginated with a default limit of 50 rules.
  - info:
      name: Create A New Data Deletion Rule
      type: http
    http:
      method: POST
      url: https://api.au.sumologic.com/api/v1/dataDeletionRules
      body:
        type: json
        data: '{}'
    docs: Create a new data deletion rule to delete logs.
  - info:
      name: Get Data Deletion Rule Information For The Given Id.
      type: http
    http:
      method: GET
      url: https://api.au.sumologic.com/api/v1/dataDeletionRules/:id
      params:
      - name: id
        va

# --- truncated at 32 KB (204 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/sumo-logic/refs/heads/main/apis.yml