Cloud SOAR APIs

The Cloud SOAR APIs allow you to manage incidents, triage, and other Cloud SOAR features.

Documentation

info

If your instance URL is a subdomain of soar.sumologic.com, refer to Inline API documentation below.

To get started with Sumo Logic APIs, see API Authentication, Endpoints, and Security.

Our APIs are built with OpenAPI. You can generate client libraries in several languages and explore automated testing.

To access our API documentation, navigate to the appropriate link based on your Sumo deployment. Deployment types differ based on geographic location and account creation date. If unsure, see Which endpoint should I use?

Deployment	Documentation URL
AU	https://api.au.sumologic.com/docs/csoar/
CA	https://api.ca.sumologic.com/docs/csoar/
DE	https://api.de.sumologic.com/docs/csoar/
EU	https://api.eu.sumologic.com/docs/csoar/
JP	https://api.jp.sumologic.com/docs/csoar/
KR	https://api.kr.sumologic.com/docs/csoar/
US1	https://api.sumologic.com/docs/csoar/
US2	https://api.us2.sumologic.com/docs/csoar/

Inline API documentation

For organizations having Cloud SOAR available at URLs matching the pattern *.soar.sumologic.com, the API documentation is available through your Cloud SOAR instance at the following URL:

https://<cloudsoarhost>/incmansuite_ng/lib/gui/app.php#support_apidoc|api_documentation_v3

For more information, see Legacy Cloud SOAR APIs.

Required role capabilities

To use the APIs in this resource, the user or account executing APIs must have the following role capabilities:

• Cloud SOAR (all role capabilities)