Sumo Logic
Sumo Logic is a cloud-native, machine data analytics platform delivering real-time, continuous intelligence for operations, security, and business insights. It provides a comprehensive REST API with 289 endpoints spanning log analytics, dashboards, monitors, roles, users, metrics, traces, and more.
1 APIs
0 Features
LoggingObservabilitySecurityMonitoringAnalyticsDevOpsSIEM
APIs
Sumo Logic API
Sumo Logic REST API providing 289 endpoints for managing log analytics, users, roles, dashboards, monitors, connections, collectors, sources, search jobs, ingest budgets, partit...
Collections
Sumo Logic API
OPENGraphQL
Sumo Logic GraphQL Schema
This directory contains a conceptual GraphQL schema for the Sumo Logic cloud logging and monitoring platform, derived from the [Sumo Logic REST API v1](https://api.sumologic.com...
GRAPHQLPricing Plans
Rate Limits
FinOps
Sumo Logic Finops
FINOPSSemantic Vocabularies
API Governance Rules
JSON Structure
Example Payloads
Resources
👥
GitHubOrganization
GitHubOrganization
🔗
LinkedIn
LinkedIn
🌐
Portal
Portal
🔗
Documentation
Documentation
🔗
Reference
Reference
🔗
Website
Website
🚀
GettingStarted
GettingStarted
🟢
StatusPage
StatusPage
Sources
opencollection: 1.0.0
info:
name: Sumo Logic API
version: 1.0.0
request:
auth:
type: basic
username: '{{username}}'
password: '{{password}}'
items:
- info:
name: appManagement
type: folder
items:
- info:
name: List Available Apps.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/apps
docs: Lists all available apps from the App Catalog.
- info:
name: Get An App By UUID.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/apps/:uuid
params:
- name: uuid
value: ''
type: path
description: The identifier of the app to retrieve.
docs: Gets the app with the given universally unique identifier (UUID).
- info:
name: Install An App By UUID.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/apps/:uuid/install
params:
- name: uuid
value: ''
type: path
description: UUID of the app to install.
body:
type: json
data: '{}'
docs: Installs the app with given UUID in the folder specified using destinationFolderId.
- info:
name: App Install Job Status.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/apps/install/:jobId/status
params:
- name: jobId
value: ''
type: path
description: The identifier of the asynchronous install job.
docs: Get the status of an asynchronous app install request for the given job identifier.
- info:
name: appManagementV2
type: folder
items:
- info:
name: Start App Install Job
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v2/apps/:uuid/install
params:
- name: uuid
value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
type: path
description: UUID of the app to install.
body:
type: json
data: '{}'
docs: 'Schedule an asynchronous job to install the app with the given UUID and version from the App Catalog. The app will
be installed in ''Installed Apps'' folder in the Content Library.
_You get back an identifier of asynchronous job in response to this endpoint. You can then use the [app install status
API](#operation/getAsyncInstallAppStatus) to get the status of the installation request. See [Asynchronous-Request](#section/Getting-Started/Asynchronous-Request)
section for more details on how to wor'
- info:
name: App Install Job Status
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v2/apps/install/:jobId/status
params:
- name: jobId
value: C03E086C137F38B4
type: path
description: Identifier of the asynchronous job for installing the app.
docs: Get the status of an asynchronous app install request for the given job identifier.
- info:
name: Start App Uninstall Job
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v2/apps/:uuid/uninstall
params:
- name: uuid
value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
type: path
description: UUID of the app to uninstall.
docs: 'Schedule an asynchronous job to uninstall app with the given UUID.
_You get back an identifier of asynchronous job in response to this endpoint. You can then use the [app uninstall status
API](#operation/getAsyncUninstallAppStatus) to get the status of the uninstallation request. See [Asynchronous-Request](#section/Getting-Started/Asynchronous-Request)
section for more details on how to work with asynchronous request._'
- info:
name: App Uninstall Job Status
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v2/apps/uninstall/:jobId/status
params:
- name: jobId
value: C03E086C137F38B4
type: path
description: Identifier of the asynchronous job for uninstalling the app.
docs: Get the status of an asynchronous app uninstall request for the given job identifier.
- info:
name: Start App Upgrade Job
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v2/apps/:uuid/upgrade
params:
- name: uuid
value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
type: path
description: UUID of the app to upgrade.
body:
type: json
data: '{}'
docs: 'Schedule an asynchronous job to upgrade the app with the given UUID and version from the App Catalog. The app will
be installed in ''Installed Apps'' folder in the Content Library.
_You get back an identifier of asynchronous job in response to this endpoint. You can then use the [app upgrade status
API](#operation/getAsyncUpgradeAppStatus) to get the status of the upgrade request. See [Asynchronous-Request](#section/Getting-Started/Asynchronous-Request)
section for more details on how to work wit'
- info:
name: App Upgrade Job Status
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v2/apps/upgrade/:jobId/status
params:
- name: jobId
value: C03E086C137F38B4
type: path
description: Identifier of the asynchronous job for upgrading the app.
docs: Get the status of an asynchronous app upgrade request for the given job identifier.
- info:
name: List Apps
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v2/apps
params:
- name: name
value: AWS%20CloudTrail
type: query
description: Name of the app.
- name: author
value: Sumo%20Logic
type: query
description: Author of the app.
docs: List all apps from the App Catalog.
- info:
name: Get Details Of An App Version.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v2/apps/:uuid/details
params:
- name: uuid
value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
type: path
description: UUID of the app.
- name: version
value: 1.0.0
type: query
description: Version of the app. The latest version is used if this is omitted or specified as "latest".
docs: "Get details about an app with the given UUID and version. The details include:\n\n 1. The base URL for all the\
\ resource for the app.\n 2. The app manifest"
- info:
name: Get Subscription Status For The User
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v2/apps/:uuid/subscription
params:
- name: uuid
value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
type: path
description: UUID of the app.
docs: Get Subscription status for the user for a specific app. This will indicate whether the user has subscribed to
the app or not.
- info:
name: Subscribe To An App Upgrade Notification
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v2/apps/:uuid/subscription
params:
- name: uuid
value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
type: path
description: UUID of the app to subscribe to.
docs: Subscribe to an app upgrade notification. This will allow the user to receive notifications for the app updates.
- info:
name: Unsubscribe From An App Upgrade Notification
type: http
http:
method: DELETE
url: https://api.au.sumologic.com/api/v2/apps/:uuid/subscription
params:
- name: uuid
value: ceb7fac5-1127-4a04-a5b8-2e49190be3d5
type: path
description: UUID of the app to unsubscribe from.
docs: Unsubscribe from an app. This will remove the user's subscription to notifications for the app.
- info:
name: connectionManagement
type: folder
items:
- info:
name: Get A List Of Connections.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/connections
params:
- name: limit
value: ''
type: query
description: Limit the number of connections returned in the response. The number of connections returned may be less
than the `limit`.
- name: token
value: ''
type: query
description: Continuation token to get the next page of results. A page object with the next continuation token is
returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
of results. `token` is set to null when no more pages are left.
docs: Get a list of all connections in the organization. The response is paginated with a default limit of 100 connections
per page.
- info:
name: Create A New Connection.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/connections
body:
type: json
data: '{}'
docs: Create a new connection in the organization.
- info:
name: Test A New Connection Url.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/connections/test
params:
- name: functionalities
value: alert,resolution
type: query
description: 'A comma-separated functionalities of webhook payload to test. Acceptable values: `alert`, `resolution`.'
- name: connectionId
value: 0000000000123ABC
type: query
description: Unique identifier of an existing connection to test. It should be provided when the request body of an
existing connection contains masked authorization headers. If not provided, the authorization headers will not be
correctly unmasked, and the test may fail due to unauthorized access.
body:
type: json
data: '{}'
docs: Test a new connection url is valid and can connect.
- info:
name: Get Incident Templates For CloudSOAR Connections.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/connections/incidentTemplates
body:
type: json
data: '{}'
docs: Get incident templates for CloudSOAR connections.
- info:
name: Get A Connection.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/connections/:id
params:
- name: id
value: ''
type: path
description: Identifier of connection to return.
- name: type
value: ''
type: query
description: Type of connection to return. Valid values are `WebhookConnection`, `ServiceNowConnection`.
docs: Get a connection with the given identifier.
- info:
name: Update A Connection.
type: http
http:
method: PUT
url: https://api.au.sumologic.com/api/v1/connections/:id
params:
- name: id
value: ''
type: path
description: Identifier of the connection to update.
body:
type: json
data: '{}'
docs: Update an existing connection.
- info:
name: Delete A Connection.
type: http
http:
method: DELETE
url: https://api.au.sumologic.com/api/v1/connections/:id
params:
- name: id
value: ''
type: path
description: Identifier of the connection to delete.
- name: type
value: ''
type: query
description: Type of connection to delete. Valid values are `WebhookConnection`, `ServiceNowConnection`.
docs: Delete a connection with the given identifier.
- info:
name: scheduledViewManagement
type: folder
items:
- info:
name: Get A List Of Scheduled Views.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/scheduledViews
params:
- name: limit
value: ''
type: query
description: Limit the number of scheduled views returned in the response. The number of scheduled views returned
may be less than the `limit`.
- name: token
value: ''
type: query
description: Continuation token to get the next page of results. A page object with the next continuation token is
returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
of results. `token` is set to null when no more pages are left.
docs: Get a list of all scheduled views in the organization. The response is paginated with a default limit of 100 scheduled
views per page.
- info:
name: Create A New Scheduled View.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/scheduledViews
body:
type: json
data: '{}'
docs: Creates a new scheduled view in the organization.
- info:
name: Get A Scheduled View.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/scheduledViews/:id
params:
- name: id
value: ''
type: path
description: Identifier of the scheduled view to fetch.
docs: Get a scheduled view with the given identifier.
- info:
name: Update A Scheduled View.
type: http
http:
method: PUT
url: https://api.au.sumologic.com/api/v1/scheduledViews/:id
params:
- name: id
value: ''
type: path
description: Identifier of the scheduled view to update.
body:
type: json
data: '{}'
docs: Update an existing scheduled view.
- info:
name: Disable A Scheduled View.
type: http
http:
method: DELETE
url: https://api.au.sumologic.com/api/v1/scheduledViews/:id/disable
params:
- name: id
value: ''
type: path
description: Identifier of the scheduled view to disable.
docs: Disable a scheduled view with the given identifier.
- info:
name: Pause A Scheduled View.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/scheduledViews/:id/pause
params:
- name: id
value: ''
type: path
description: Identifier of the scheduled view to pause.
docs: Pause a scheduled view with the given identifier.
- info:
name: Start A Scheduled View.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/scheduledViews/:id/start
params:
- name: id
value: ''
type: path
description: Identifier of the scheduled view to start.
docs: Start a scheduled view with the given identifier.
- info:
name: Provides Information About Scheduled Views Quota.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/scheduledViews/quota
docs: Every customer can use a limited number of scheduled views. This endpoint allows learning about these limitations
and remaining quota.
- info:
name: lookupManagement
type: folder
items:
- info:
name: Create A Lookup Table.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/lookupTables
body:
type: json
data: '{}'
docs: "Create a new lookup table by providing a schema and specifying its configuration. Providing parentFolderId\n is\
\ mandatory. Use the [getItemByPath](#operation/getItemByPath) endpoint to get content id of a path.\nPlease check [Content\
\ management API](#tag/contentManagement) and [Folder management API](#tag/folderManagement) for all available options."
- info:
name: Get A Lookup Table.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/lookupTables/:id
params:
- name: id
value: ''
type: path
description: Identifier of the lookup table.
docs: Get a lookup table for the given identifier.
- info:
name: Edit A Lookup Table.
type: http
http:
method: PUT
url: https://api.au.sumologic.com/api/v1/lookupTables/:id
params:
- name: id
value: ''
type: path
description: Identifier of the lookup table.
body:
type: json
data: '{}'
docs: Edit the lookup table data. All the fields are mandatory in the request.
- info:
name: Delete A Lookup Table.
type: http
http:
method: DELETE
url: https://api.au.sumologic.com/api/v1/lookupTables/:id
params:
- name: id
value: ''
type: path
description: Identifier of the lookup table.
docs: Delete a lookup table completely. <br> **Warning:** `This operation cannot be undone`.
- info:
name: Upload A CSV File.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/lookupTables/:id/upload
params:
- name: id
value: ''
type: path
description: Identifier of the lookup table to populate.
- name: merge
value: ''
type: query
description: This indicates whether the file contents will be merged with existing data in the lookup table or not.
If this is true then data with the same primary keys will be updated while the rest of the rows will be appended.
By default, merge is false. The response includes a request identifier that you need to use in the [Request Status
API](#operation/requestStatus) to track the status of the upload request.
- name: fileEncoding
value: ''
type: query
description: File encoding of file being uploaded.
body:
type: multipart-form
data:
- name: file
type: text
value: ''
docs: Create a request to populate a lookup table with a CSV file.
- info:
name: Get The Status Of An Async Job.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/lookupTables/jobs/:jobId/status
params:
- name: jobId
value: ''
type: path
description: An identifier returned in response to an asynchronous request.
docs: Retrieve the status of a previously made request. If the request was successful, the status of the response object
will be `Success`.
- info:
name: Empty A Lookup Table.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/lookupTables/:id/truncate
params:
- name: id
value: ''
type: path
description: Identifier of the table to clear.
docs: Delete all data from a lookup table.
- info:
name: Insert Or Update A Lookup Table Row.
type: http
http:
method: PUT
url: https://api.au.sumologic.com/api/v1/lookupTables/:id/row
params:
- name: id
value: ''
type: path
description: Identifier of the lookup table.
body:
type: json
data: '{}'
docs: Insert or update a row of a lookup table with the given identifier. A new row is inserted if the primary key does
not exist already, otherwise the existing row with the specified primary key is updated. All the fields of the lookup
table are required and will be updated to the given values. In case a field is not specified then it will be assumed
to be set to null. If the table size exceeds the maximum limit of 100MB then based on the size limit action of the table
the update will be processed o
- info:
name: Delete A Lookup Table Row.
type: http
http:
method: PUT
url: https://api.au.sumologic.com/api/v1/lookupTables/:id/deleteTableRow
params:
- name: id
value: ''
type: path
description: Identifier of the lookup table.
body:
type: json
data: '{}'
docs: Delete a row from lookup table by providing the row's primary keys' values. The complete set of primary key fields
of the lookup table should be provided.
- info:
name: partitionManagement
type: folder
items:
- info:
name: Get A List Of Partitions.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/partitions
params:
- name: limit
value: ''
type: query
description: Limit the number of partitions returned in the response. The number of partitions returned may be less
than the `limit`.
- name: token
value: ''
type: query
description: Continuation token to get the next page of results. A page object with the next continuation token is
returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
of results. `token` is set to null when no more pages are left.
- name: viewTypes
value: AuditIndex,Partition
type: query
description: "The type of partitions to retrieve. Valid values are:\n 1. `DefaultView`: To get General Index partition.\n\
\ 2. `Partition`: To get user defined views/partitions.\n 3. `AuditIndex`: To get the internal audit indexes.\
\ Eg. sumologic_audit_events.\n\nMore than one type of partitions can be retrieved in same request."
docs: Get a list of all partitions in the organization. The response is paginated with a default limit of 100 partitions
per page.
- info:
name: Create A New Partition.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/partitions
body:
type: json
data: '{}'
docs: Create a new partition.
- info:
name: Get A Partition.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/partitions/:id
params:
- name: id
value: ''
type: path
description: Identifier of partition to return.
docs: Get a partition with the given identifier from the organization.
- info:
name: Update A Partition.
type: http
http:
method: PUT
url: https://api.au.sumologic.com/api/v1/partitions/:id
params:
- name: id
value: ''
type: path
description: Identifier of the partition to update.
body:
type: json
data: '{}'
docs: Update an existing partition in the organization.
- info:
name: Decommission A Partition.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/partitions/:id/decommission
params:
- name: id
value: ''
type: path
description: Identifier of the partition to decommission.
docs: Decommission a partition with the given identifier from the organization.
- info:
name: Cancel A Retention Update For A Partition
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/partitions/:id/cancelRetentionUpdate
params:
- name: id
value: '1'
type: path
description: Identifier of the partition to cancel the retention update for.
docs: Cancel update to retention of a partition for which retention was updated previously using `reduceRetentionPeriodImmediately`
parameter as false
- info:
name: Provides Information About Partitions Quota.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/partitions/quota
docs: Every customer can use a limited number of partitions. This endpoint allows learning about these limitations and
remaining quota.
- info:
name: logsDataForwardingManagement
type: folder
items:
- info:
name: Get Amazon S3 Data Forwarding Destinations.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/logsDataForwarding/destinations
params:
- name: limit
value: ''
type: query
description: Limit the number of data forwarding destinations returned in the response. The number of data forwarding
destinations returned may be less than the `limit`.
- name: token
value: ''
type: query
description: Continuation token to get the next page of results. A page object with the next continuation token is
returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
of results. `token` is set to null when no more pages are left.
docs: Get a list of all Amazon S3 data forwarding destinations.
- info:
name: Create An S3 Data Forwarding Destination.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/logsDataForwarding/destinations
body:
type: json
data: '{}'
docs: Create a new Amazon S3 data forwarding destination.
- info:
name: Get An S3 Data Forwarding Destination.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/logsDataForwarding/destinations/:id
params:
- name: id
value: '1'
type: path
description: Identifier of the S3 data forwarding destination to return.
docs: Get an S3 data forwarding destination by the given identifier.
- info:
name: Update An S3 Data Forwarding Destination.
type: http
http:
method: PUT
url: https://api.au.sumologic.com/api/v1/logsDataForwarding/destinations/:id
params:
- name: id
value: '1'
type: path
description: Identifier of the data forwarding destination to update.
body:
type: json
data: '{}'
docs: Update an S3 data forwarding destination by the given identifier.
- info:
name: Delete An S3 Data Forwarding Destination.
type: http
http:
method: DELETE
url: https://api.au.sumologic.com/api/v1/logsDataForwarding/destinations/:id
params:
- name: id
value: '1'
type: path
description: Identifier of the data forwarding destination to delete.
docs: Delete an existing Amazon S3 data forwarding destination with the given identifier.
- info:
name: Get All S3 Data Forwarding Rules.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/logsDataForwarding/rules
params:
- name: limit
value: ''
type: query
description: Limit the number of data forwarding rules returned in the response. The number of data forwarding rules
returned may be less than the `limit`.
- name: token
value: ''
type: query
description: Continuation token to get the next page of results. A page object with the next continuation token is
returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
of results. `token` is set to null when no more pages are left.
docs: Get a list of all S3 data forwarding rules.
- info:
name: Create An S3 Data Forwarding Rule.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/logsDataForwarding/rules
body:
type: json
data: '{}'
docs: Create a data forwarding rule to send data from a Partition or Scheduled View to an S3 bucket.
- info:
name: Get An S3 Data Forwarding Rule By Its Index.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/logsDataForwarding/rules/:indexId
params:
- name: indexId
value: '1'
type: path
description: The `id` of the Partition or Scheduled View.
docs: Get the details of an S3 data forwarding rule by its Partition or Scheduled View identifier.
- info:
name: Update An S3 Data Forwarding Rule By Its Index.
type: http
http:
method: PUT
url: https://api.au.sumologic.com/api/v1/logsDataForwarding/rules/:indexId
params:
- name: indexId
value: '1'
type: path
description: The `id` of the Partition or Scheduled View with the data forwarding rule to update.
body:
type: json
data: '{}'
docs: Update an S3 data forwarding rule by its Partition or Scheduled View identifier.
- info:
name: Delete An S3 Data Forwarding Rule By Its Index.
type: http
http:
method: DELETE
url: https://api.au.sumologic.com/api/v1/logsDataForwarding/rules/:indexId
params:
- name: indexId
value: '1'
type: path
description: The `id` of the Partition or Scheduled View with the data forwarding rule to delete.
docs: Delete an S3 data forwarding rule by its Partition or Scheduled View identifier.
- info:
name: logSearchesManagement
type: folder
items:
- info:
name: List All Saved Log Searches.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/logSearches
params:
- name: limit
value: '50'
type: query
description: Limit the number of log searches returned in the response. The number of log searches returned may be
less than the `limit`.
- name: token
value: GDCiRv4vebF3UWFJQ1kySXBOR3Bzh69GR0RyWm9vCtc
type: query
description: Continuation token to get the next page of results. A page object with the next continuation token is
returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
of results. `token` is set to null when no more pages are left.
docs: List all saved log searches viewable by the user.
- info:
name: Save A Log Search.
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/logSearches
body:
type: json
data: '{}'
docs: Save the log search in the content library.
- info:
name: Get The Saved Log Search.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/logSearches/:id
params:
- name: id
value: ''
type: path
description: Identifier of the saved log search.
docs: Get a saved log search from the content library by identifier.
- info:
name: Update The Saved Log Search.
type: http
http:
method: PUT
url: https://api.au.sumologic.com/api/v1/logSearches/:id
params:
- name: id
value: ''
type: path
description: Identifier of the saved log search.
body:
type: json
data: '{}'
docs: Update the saved log search with the specified identifier. Partial update is not supported, you must provide values
for all fields.
- info:
name: Delete The Saved Log Search.
type: http
http:
method: DELETE
url: https://api.au.sumologic.com/api/v1/logSearches/:id
params:
- name: id
value: ''
type: path
description: Identifier of the saved log search.
docs: Delete the saved log search from the content library.
- info:
name: dataDeletionRules
type: folder
items:
- info:
name: Get A List Of Data Deletion Rules
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/dataDeletionRules
params:
- name: limit
value: '100'
type: query
description: Limit the number of deletion Rules returned in the response
- name: token
value: ''
type: query
description: Continuation token to get the next page of results. A page object with the next continuation token is
returned in the response body. Subsequent GET requests should specify the continuation token to get the next page
of results. `token` is set to null when no more pages are left.
docs: Get a list of data deletion rules in the organization. The response is paginated with a default limit of 50 rules.
- info:
name: Create A New Data Deletion Rule
type: http
http:
method: POST
url: https://api.au.sumologic.com/api/v1/dataDeletionRules
body:
type: json
data: '{}'
docs: Create a new data deletion rule to delete logs.
- info:
name: Get Data Deletion Rule Information For The Given Id.
type: http
http:
method: GET
url: https://api.au.sumologic.com/api/v1/dataDeletionRules/:id
params:
- name: id
va
# --- truncated at 32 KB (204 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/sumo-logic/refs/heads/main/apis.yml