We're excited to introduce the new Cisco AMP app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud Cisco AMP source that collects system log data from the Cisco AMP platform. This app helps security analysts with comprehensive tools to enhance threat detection capabilities, investigate incidents thoroughly, and fortify cybersecurity defenses proactively. Learn more.
We are excited to announce the release of our new cloud-to-cloud source for VMware Workspace One. With this cloud source, you can collect the device details and corresponding list of applications for the devices from the VMware Workspace One platform and send them to Sumo Logic for a streamlined analysis. Learn more.
We're excited to announce the release of our new cloud-to-cloud source for Dragos. This source helps you to collect address, asset, vulnerability, and zone details from the Dragos API and ingest them into Sumo Logic for streamlined analysis. Learn more.
We are excited to announce the release of our new Universal Connector. With this cloud source, you can collect log data from vendor APIs using a modular configuration. This source allows Sumo Logic to expand its configuration modules over time, providing greater compatibility with various vendor APIs. However, it's important to note that complex APIs will still require a specific cloud source and may not be compatible with this universal source. Learn more.
We’re excited to introduce self-service checkout, a streamlined way for trial users to upgrade to an Essentials plan directly from within the Sumo Logic platform. No more waiting for sales assistance—now you can unlock premium features in just a few clicks!
With self-service checkout, you’ll enjoy:
Ready to get started? Learn how to upgrade your plan.
We're excited to share some updates to the new UI based on feedback we've received from our customers. These updates were implemented to enhance your navigation experience and improve your workflow.
You can try the new UI by clicking the Switch to New UI link from the Classic UI menu navigation. Learn more.
We're excited to introduce the new CrowdStrike Falcon FileVantage app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud CrowdStrike FileVantage source that collects FileVantage logs from the CrowdStrike platform. This app helps you detect unauthorized or high-risk file changes, policy violations, and suspicious activities that may indicate potential threats or compliance breaches. Learn more.
We are happy to announce the behavioural change for the compareCIDRPrefix and getCIDRPrefix operators. Previously, these operators would fail if there were trailing or leading spaces around the IP address. With this update, the compareCIDRPrefix and getCIDRPrefix operators have become more flexible and can do trimming, which means the operators will not fail even if there are trailing or leading spaces around the IP address.
We're excited to announce the release of our new cloud-to-cloud source for Trust Login. This source helps you to collect the report logs from the Trust Login platform, and ingest them into Sumo Logic for streamlined analysis. Learn more.
We're excited to introduce the new Digital Guardian ARC app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud Digital Guardian source that provides data protection through analytics, reporting, and workflows. This integration helps to improve real-time activity monitoring, pre-configure alerts for different events, analyze policy enforcements, provide geolocation insights to support targeted threat investigation and response, and identify potential tampering by closely monitoring digital signatures for files and applications.
Explore our technical documentation here to learn how to set up and use the Digital Guardian ARC app for Sumo Logic.
We're excited to introduce the new Microsoft Defender for Cloud app for Sumo Logic. This app helps you to collect the alerts, security recommendation, and regulatory compliance logs using the Sumo Logic Cloud-to-Cloud Azure Event Hub Source and by configuring the continuous export using the Event Hub instance details in the Azure portal. Key features of the Microsoft Defender for Cloud app include:
Explore our technical documentation here to learn how to set up and use the Microsoft Defender for Cloud app for Sumo Logic.
We're excited to introduce Copilot, an AI-powered assistant that accelerates log investigations and troubleshooting. With natural language query capabilities and contextual suggestions, Copilot helps security first responders and on-call engineers resolve incidents quickly and efficiently. Learn more.
We’re excited to announce the release of the new Azure Database for PostgreSQL, Azure Cosmos DB, and Azure App Service Environment for Sumo Logic.
We're excited to announce the release of the enhancements listed below for the Sumo Logic apps:
v.1.0.11 in Pypi and v1.0.18 in AWS Serverless Repository. Learn more
This feature is in Preview. To participate, contact your Sumo Logic account representative.
We’re excited to announce the preview release of Query Assist, designed to simplify query building by reducing complexity, enabling easier field discovery, minimizing errors, and providing intelligent query-writing assistance. These enhancements deliver real-time syntax suggestions, schema-based recommendations, and a frictionless query experience.
These updates make it easier for both beginners and advanced users to craft accurate queries and analyze data efficiently. Learn more.
We're excited to announce the release of our new cloud-to-cloud source for Trend Micro. This source helps you to collect alert details from the Trend Micro platform, and ingest them into Sumo Logic for streamlined analysis. Learn more.
We know that getting started with new tools can be challenging. To simplify your onboarding, we’ve introduced Kickstart Data with preloaded sample data and prebuilt dashboards designed to streamline your trial experience with Sumo Logic. With this sample data, you can jump right in, explore dashboards, and understand Sumo Logic's value without needing to set up your own data first.
See how Kickstart Data can simplify your onboarding, helping you focus on monitoring and troubleshooting. For more details, visit our Quickstart Guide.
We're happy to announce a change in the computation for the scanned_partition_count Search Audit Index field. Previously, we were using incorrect computation to calculate the value for the scanned_partition_count field. With this change, the incorrect computation is fixed and now you will obtain the correct number of partitions scanned for the respective search.
We're excited to introduce the new Kandji app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud Kandji source to collect threat events and device events, thereby maintaining a secure Apple device environment and strengthening organizational security posture.
Explore our technical documentation here to learn how to set up and use the Kandji app for Sumo Logic.
In May 2024, we introduced new visualization charts for all the Log Search queries, with which you can customize each chart by modifying the available settings and obtain a unified experience across the Sumo Logic platforms.
Effective November 22, 2024, the Switch to Classic Visualization button will be removed, and the Classic Visualization view will no longer be available. By default, all your charts will automatically display in the New Visualization style.
We're excited to announce the general availability of AI-driven alerts for metrics anomalies, extending our AI-driven alerting capabilities to include metrics-based monitors. This new feature aims to reduce alert fatigue and accelerate incident resolution through the use of automated playbooks. Learn more.
As part of our ongoing evaluation of the Sumo Logic service, our product team is deprecating Root Cause Explorer, and it will no longer be available as of 30 April 2025.
Learn more here.
We’re excited to announce the release of new Azure Database for MySQL, Azure App Service Plan, Amazon Bedrock, Amazon OpenSearch, and Cosmos DB for NoSQL apps for Sumo Logic.
We're excited to announce the release of below listed enhancements for the Sumo Logic apps:
Minor query fixes in the below Classic Apps (Legacy):
We're excited to introduce the new CrowdStrike Spotlight app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud CrowdStrike Spotlight source to collect vulnerability logs through the CrowdStrike Spotlight API, helping you to obtain real-time visibility into vulnerabilities across your organization's assets to the security teams.
Explore our technical documentation here to learn how to set up and use the CrowdStrike Spotlight app for Sumo Logic.
We are happy to introduce our new Usage Management tab under the Accounts section. This feature allows you to define query spending limits, helping prevent unexpected charges and manage Sumo Logic credits, particularly in pay-per-use scenarios by limiting search volume.
Key features include:
Explore our technical documentation here to learn how to set up and use Scan Budgets.
We're excited to introduce the new Zendesk app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud Zendesk source to collect audit logs, providing security analysts with critical visibility into their Zendesk environment.
Explore our technical documentation here to learn how to set up and use the Zendesk app for Sumo Logic.
We're excited to introduce the new LastPass app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud LastPass source to collect audit logs, providing security analysts with critical visibility into their LastPass environment.
Explore our technical documentation here to learn how to set up and use the LastPass app for Sumo Logic.
We're excited to announce the preview of AI-driven alerts for metrics anomalies, extending our AI-driven alerting to metrics-based monitors. This preview release helps reduce alert fatigue and enables faster incident resolution with automated playbooks.
We’ve added the Convert to Anomaly option, allowing you to convert outlier monitors into anomaly-based monitors for more efficient data usage and reduced alert noise. Please note that this feature is only available for log monitors at this time. Learn more.
We're excited to introduce the new Atlassian app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud Atlassian source to collect events logs through the Events API, helping you to to monitor critical events such as user activities, policy changes, group and API token creations, and product access.
Explore our technical documentation here to learn how to set up and use the Atlassian app for Sumo Logic.
We're happy to announce enhancements to Cloud Infrastructure for AWS. These capabilities were previously only available in a preview form. They are now available for general use.
You can now more easily configure sources on a simplified screen, allowing you to use existing sources or create new sources.
We're excited to announce the release of our new cloud-to-cloud source for Digital Guardian. This source helps you to collect export data logs using the Export API and uses Acknowledge API to advance the bookmark value to obtain the next chunk of data from export endpoint to ingests it into Sumo Logic. Learn more.
We're excited to announce the release of our new cloud-to-cloud source for Kandji. This source helps you to collect threat details, device lists, activity logs, and device information from the Kandji platform, and ingest them into Sumo Logic for streamlined analysis. Learn more.
We're excited to announce the release of our new cloud-to-cloud source for Automox. This source helps you to collect all events objects, audit trail events, and device inventory details from the Automox platform, and ingest them into Sumo Logic for streamlined analysis. Learn more.
We're excited to announce that when you create a role, you can select Index Access to restrict access to data in specific indexes. In addition, when you now select Search Filter, you can create filtering to restrict access to log analytics, audit, and security data. These enhancements ensure that users only see the data they are supposed to.
This feature was previously only available to participants in our beta program. It is now available for general use.
These changes are rolling out across deployments incrementally and will be available on all deployments by January 10, 2025.
We are happy to announce that you can now configure the schema and format of log data forwarded from Sumo Logic to an S3 destination. Previously, forwarding was limited to raw log data along with its metadata and enriched fields. Now, you have the flexibility to choose between forwarding only log data, log data with metadata, or log data with metadata and enriched fields, in either CSV or JSON format. This enhanced flexibility enables you to perform more precise analytics on the data using your preferred tools.
To learn more, see the Forward data to an S3 forwarding destination section in our article Forward Data from Sumo Logic to S3.
We’re excited to announce the release of new Azure Load Balancer, Azure Cache for Redis, and Doppel Vision apps for Sumo Logic.
We're excited to announce the release of the updated version of IIS 10 - OpenTelemetry and Azure Webapps apps for Sumo Logic, which includes the below enhancements:
Minor fixes for the below listed apps. To know more about the version updates, navigate to the Releases Notes tab of the respective app.
We are excited to introduce the Multiple Scheduled Reports feature to Sumo Logic dashboards. This powerful new capability allows you to configure multiple reports against a dashboard, providing enhanced flexibility and control over your reporting needs. Key features include:
Learn more here.
We're excited to announce the opt-in general availability of our Sumo Logic New UI. This release introduces several enhancements designed to improve your overall experience:
Explore these improvements and check out our documentation. We value your feedback as we continue to refine our UI.
We're excited to announce the release of our new cloud-to-cloud source for Zendesk. This source helps you to collect audit logs using the Zendesk API and ingests it into Sumo Logic. Learn more.
We're excited to introduce the new Microsoft Azure AD Inventory app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud Microsoft Azure AD Inventory source to collect devices and users logs through the Microsoft Graph API, providing you with robust security monitoring and threat detection capabilities.
Explore our technical documentation here to learn how to set up and use the Microsoft Azure AD Inventory app for Sumo Logic.
We are excited to announce the release of AWS Observability 2.10.0. In this update we have updated the Lambda functions runtime version to Python 3.12 along with the required libraries.
To learn more, refer to the AWS Observability changelog.
We're excited to introduce the new Sophos App for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud Sophos source to collect alerts and event logs through the Sophos Central APIs, providing you with robust security monitoring and threat detection capabilities.
Explore our technical documentation here to learn how to set up and use the Sophos app for Sumo Logic.
We are excited to introduce the new Add a Filter section in the logs tab, designed to help you refine table results more effectively. The filtering mechanism uses AND logic between different sections and OR logic within the same section, ensuring you get the most accurate and relevant data.
We're excited to announce the release of the updated version of Azure Functions and Azure Application Gateway apps for Sumo Logic, which includes the below enhancements:
Azure Functions. 11 new dashboards are added that use Activity logs, Function Application logs, App Service Authentication logs, Azure Functions specific metrics, and General App Service metrics. This app enables seamless integration and monitoring of Azure Functions, providing insights and analytics to optimize serverless application performance and security. Learn more
Azure Application Gateway. 10 new dashboards are added that use Activity logs, Access logs, Performance logs, Firewall logs, and Platform metrics. This app helps in analyzing access patterns, tracking performance information for each instance, including total requests served, throughput in bytes, healthy and unhealthy backend instance count. Learn more
We're happy to announce a change to the behaviour of the count operator to return Long values. Previously, the count operator returned Int data type which could lead to a negative value if the maximum integer value was exceeded. With this change, we are changing the data type of the count operator result from Int to Long data type.
This change will apply to all new queries. Any existing queries as part of various content types - Log Search, Scheduled Search, Lookup Table, Scheduled Views, and Saved Search will also seamlessly transition to show Long values in case of Int overflow.
We're excited to announce the release of our new cloud-to-cloud source for Symantec Endpoint Security. This source helps you to collect incident and incident events using the Symantec Incidents API and ingests it into Sumo Logic. Learn more.
We're excited to announce the release of the new CrowdStrike FDR Host Inventory app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud CrowdStrike FDR Host Inventory source to gain actionable insights and visualizations to help you prioritize and mitigate device security incidents efficiently.
Check out our technical documentation here to learn how to set up and use the CrowdStrike FDR Host Inventory app for Sumo Logic.
We're excited to announce the release of the updated version of Azure SQL and Azure Storage apps for Sumo Logic, which includes the below enhancements:
Azure SQL. Five new dashboards are added that use activity logs, SQL security logs, and automated tuning logs. This app now provides more use cases around auditing DML, DDL, DQL, TCL statements, and service and resource health incidents. It also provides policy compliance and recommendations information from Azure advisor. Learn more
Azure Storage. Enhanced monitoring storage performance across all services, such as blob, queue, file, and table. In addition, you can now track resource health and service health incidents. It also provides auditing details of all the control plane operations and helps you troubleshoot errors at the object level. Learn more
We're excited to announce the release of our new cloud-to-cloud source for Jamf. This source collects inventory data from the Jamf platform using the Jamf Pro API and Jamf Classic API. Learn more.
We are excited to announce AWS Observability 2.9.0. This update includes:
To learn more, refer to the AWS Observability changelog.
We're excited to announce the release of the new Abnormal Security app for Sumo Logic. This app leverages the Sumo Logic Cloud-to-Cloud Abnormal Security source to gain actionable insights and visualizations and helps you to prioritize and mitigate security incidents efficiently.
Check out our technical documentation here to learn how to set up and use the Abnormal Security app for Sumo Logic.
We're excited to announce the release of the new Webex app for Sumo Logic. This app leverages Sumo Logic Cloud-to-Cloud Webex Source to provide comprehensive monitoring and analysis of Webex environments, offering real-time visibility into security events, user activities, and system health.
Check out our technical documentation here to learn how you can set up and use the Webex app for Sumo Logic.
We're happy to announce the release of our new source category, view_and_extractedAndCollectedFieldSize_volume in the sumologic_volume index, which provides clear visibility into the assignment of enriched data to the original ingested log messages. This feature will be visible in every relevant logline of the data volume index, enhancing your understanding of the enriched data integration process. Learn more.
For example, in the below message, the extractedAndCollectedFieldsSize property indicates the value of extracted and collected field size.
We're excited to announce the release of our new Salesforce Version 3.X.X source, which provides an upgraded authorization method to client credentials flow.
If you have the Salesforce source set up and choose to upgrade it, follow the instructions below to update your source configuration:
For Enterprise Edition orgs, we recommend selecting an execution user who has the API Only User permission.
We are excited to introduce a new and enhanced credits management experience for our Sumo Logic orgs customers. This update empowers Sumo Logic parent org admins to manage child org credits with greater ease and control. Here are the key improvements in this update:
We are excited to announce the release of our VMware app that fully supports VMware vSphere version 8. In this new version, we have fixed CVEs and updated the libraries for collecting data from VMware, ensuring a more secure and efficient virtualization environment. Learn more.
We're excited to announce the release of Metrics Data Ingestion, a new screen that provides detailed information about your metrics data consumption.
Metrics Data Ingestion answers the question, “What things are sending metrics data, and how much are they sending?”. This screen not only provides high level information about the metrics volume, you'll also see a breakdown by individual metric, as well as specific dimensions and sources. With this information, you can determine the items that contribute most to your credit consumption.
In November 2020, we introduced Ingest Budgets V2, offering greater flexibility and granularity in metadata and fields within the ingest budget definition. Despite this update, existing V1 budgets continued to function as originally defined while only allowing V2 budgets for all new configurations going forward.
V1 Ingest Budgets are deprecated, and On September 9. 2024, Sumo Logic will remove the existing V1 Ingest Budgets that remain defined in customer instances.
To ensure uninterrupted service, review your current ingest budgets under Ingest Budgets. Identify any budgets tagged as V1 and, if still needed, edit and upgrade them to V2 before the deprecation date.
After September 9, 2024, any legacy ingest budgets that are not migrated will be automatically removed, resulting in the loss of ingestion limitation functionality.
We're happy to announce the release of our new partner app for Endace. Endace delivers scalable, always-on packet capture in on-premise and hybrid cloud environments for definitive network visibility. The Endace App includes premade dashboards for logs such as Zeek, Suricata, Cisco ASA, Cisco Firepower and Palo Alto Networks, which include a Pivot-to-Vision link to connect you to your EndaceProbe for further investigation.
We're excited to announce the release of our new Azure Blob Storage Collection for append blobs. This integration with Azure Blob Storage enables you to ingest custom application logs and azure service logs stored as append blob type from a storage account to Sumo Logic.
We are happy to introduce a new update for handling missing data in window and threshold-based Service Level Objectives (SLOs). Previously, any window without data was treated as successful, and the threshold condition check was skipped. With this update, for windows without data, the threshold will be compared against zero to determine their success or failure.
This change simplifies expressing SLOs where missing data signifies unsuccessful windows. For example, consider an SLO definition where absence of heartbeat log messages signifies an unsuccessful window. Previously, such windows were treated as successful by default. With this update, modeling such cases will become much easier and more accurate.
We're excited to announce the release of Sumo Logic AWS Lambda Extension version 8. Here are the key features that this upgrade provides:
SUMOLOGIC_HTTP_ENDPOINT, including the introduction of new KMS_KEY_ID and KMS_CACHE_SECONDS environment variables.TELEMETRY_MAX_BYTES, TELEMETRY_MAX_ITEMS, and TELEMETRY_TIMEOUT_MS, which helps you to reduce the ingestion delay based on log volume.To learn more, refer to our Lambda extensions changelog.
As part of our on-going product security improvements, we have introduced the View Connections role capability. This role capability allows a user to view or change webhook and ServiceNow connections associated with a Scheduled Search or a monitor.
Starting June 24, 2024, new Scheduled Searches or monitors configured with Webhook or ServiceNow notification channels can only be viewed or assigned to those connections by users with the View Connections role capability.
Prior to June 24, 2024, assign the View Connections role capability to users where appropriate. After this date, users who do not have this role capability assigned will no longer be able to configure a Scheduled Search or monitor with a webhook target.
For information about how to configure webhook and ServiceNow connections, see Set Up Webhook Connections.
We are happy to announce a new Disallow weak passwords option in our password policy settings. When this option is enabled, users will not be able to save a password if Sumo Logic determines it is weak. For example, a password is considered weak if it is:
We are excited to announce that we have added a new Include this partition in default scope checkbox to our Create Partitions page. This allows you to include or exclude the partition from the default scope of query. When included and if _index is not considered in the query, all the included partitions will be considered for search query by default. Learn more.
We're excited to announce the new visualization charts for all the Log Search queries, with which you can customize each chart by modifying the available settings and obtain a unified experience across the Sumo Logic platforms. Charts will appear in a new visualization style by default. However, if required, you can switch to a classic visualization. Learn more.
We are excited to announce AWS Observability 2.8.0. This update includes:
To learn more, refer to the AWS Observability changelog.
We're excited to announce increased visibility into your AWS Cloud environment with the following new features:
This functionality is in preview. To participate, reach out to your Sumo Logic account executive.
As part of the preview, you can use CloudQuery logs with Cloud Infrastructure Security for AWS. To use the logs, configure the CloudQuery source when you deploy the solution.
In January 2024, we deprecated Classic Metrics in favor of our newer Metrics Explorer interface. Effective today, Sumo Logic has removed the ability to use Classic Metrics in Sumo Logic.
Metrics Explorer represents an advanced solution tailored to meet all metric-related requirements. It surpasses Classic Metrics in functionality, making it redundant to continue supporting both systems.
For information, see Metrics Explorer.
As part of our ongoing evaluation of the Sumo Logic service, we have decided to deprecate Real-Time Scheduled Searches. In particular, we will remove the option to create new Real-Time Scheduled Searches on May 15, 2024. Existing Real-Time Scheduled Searches will continue to function until May 15, 2025. We believe many use cases for Real-Time Scheduled Searches can be met by Monitors. Any remaining use cases can be met by executing these searches at 15m intervals.
In 2020, Sumo Logic released Monitors, which provided a new framework to trigger alerts on both metrics and log data in real time and send notifications. Real-Time Scheduled Searches provided a much more limited version of this functionality. Monitors will continue to be the focus area for our Product and Engineering Teams for features and enhancements regarding alerting.
Learn more here.
We're happy to announce the partial migration of 134 Classic Apps (Legacy) to Next-Gen Apps, out of an expected total of approximately 300.
Next-Gen Apps streamline app management and maintenance by supporting versioning and upgrades. These apps can be installed through the App Catalog UI and the Sumo Logic Terraform provider. To explore all available Next-Gen Apps, select the Next-Gen Apps filter on the App Catalog page.
We're happy to introduce a new partitions page enhancement that allows you to filter the partitions based on the type of partitions, either User-Defined Partitions or System Partitions. Learn more.
We're happy to announce the release of the new version of SumoLogic Nozzle for VMware Tanzu. Below are the key features that this update offers:
For detailed version information, refer to the changelog file.
We're excited to announce an update of all our Terraform-based monitors.
For details on upgrade instructions, refer to the changelog.
You can now optionally apply a Muting Schedule to your alert group. This saves time by allowing you to select an alert group (a bundled set of alerts) to associate with your Muting Schedule rather than selecting individual monitors. Learn more.
We're excited to announce the release of our new Azure Event Hubs source for logs collection. This integration with Azure Event Hubs provides you with a fully managed, scalable, and low latency solution to stream high-volume logs from Azure to Sumo Logic. Learn more.
We're excited to introduce the ability to reference Sumo Logic system indexes with an alias. With this update, you can now use an alias to point to one or more system indexes in the source expression of your search queries.
With index aliasing, you can use an alias to point to one or more system indexes, such as sumologic_default in the source expression of your query. Both the operator part and results of your query will consist of actual index names.
In addition to sumologic_default, we have several other Sumo Logic-defined system indexes. As a shortcut, rather than prefacing sumologic_ when referencing system indexes in a search, you can alias these indexes by typing an underscore at the beginning. For example, sumologic_default and _default will return the same results.
Learn more here.
NOTE: This feature is currently live in all deployments except us2 and prod. It will be rolled out to those deployments by April 2.
We are excited to announce a new set of changes to enhance the readability within the dashboard panels. With these updates, you'll have more control over time ranges, making it easier to investigate specific periods of interest and analyze data effectively. Here's what's included in this update:
Crosshair. When you hover over a time series panel, Sumo Logic now displays a crosshair line with the time series data. If other time series panels are also configured with an overlapping time range, then when you hover over one time panel, a crosshair will be displayed on the other panels as well. Learn more.
Time Syncing. Using panel zoom feature you can now modify the time range of the dashboard to zoom in for granular details. This time range is considered as a temporary time range and all the other panels in the dashboard will be zoomed in for the selected time range. Learn more.
We're excited to include the Estimate scan details for a query with pay-per-search data, which allows you to get insights into the amount of data scanned to run the query. Also, to help mitigate the cost, you can view the scan estimates while you create/modify monitors and scheduled searches. Learn more.
We're excited to introduce Sumo Logic Flex Licensing, revolutionizing log analytics pricing for technical teams by eliminating data tiers and aligning the value of log data with generated insights. This groundbreaking solution offers an efficient, centralized log analytics framework capable of managing enterprise-wide cloud-scale log ingestion seamlessly.
Flex pricing offers free, unlimited log ingest. This innovative model is designed to empower developer, security, and operations teams to capture and analyze critical data across their enterprises without worrying about cost barriers.
Consolidating all data streams into a single platform with unlimited user access fosters seamless collaboration across organizations. As log data ingestion increases, analytics and ML/AI insights sharpen, empowering DevOps and DevSecOps teams to troubleshoot faster and ensure reliable, secure digital experiences.
In an era of exponential data growth, the challenges posed by vast volumes of structured and unstructured data, including siloed information and security gaps, hinder organizations in harnessing essential business insights. Flex addresses these complexities, enabling organizations to scale AI/ML initiatives and deliver dependable digital experiences.
We’re happy to announce the addition of content_identifier and content_name fields for the partition sumologic_search_usage_per_query to improve the quality of debugging. Learn more.
Update - We're excited to announce the release of our updated app for AWS API Gateway, which includes the below enhancements:
Learn more here.
We're happy to announce two new monitoring features that allow you to generate alerts that notify you of suspicious behavior and automatically run playbooks to address it.
You can now use the Anomaly detection method when you create a monitor. This method applies machine learning techniques to detect anomalies and identify suspicious patterns. It establishes baselines for normal behavior so you receive alerts when deviations or unusual activities are encountered.
An automated playbook is a predefined set of actions and conditional statements that run in an automated workflow to respond to an event. For example, suppose that a monitor detects suspicious behavior that could indicate a security problem. When the monitor sends the alert, it could also run an automated playbook to respond to the event.
New - We're happy to introduce you to new accounts page enhancements such as Dynamic Forecasts, Credit Baseline, Total Credits Usage Breakdown, Time Series View, and Usage % Change. Learn more.
Our webhook connection for HipChat has been deprecated and is now obsolete.
For the full list of our supported webhook connections, see Sumo Logic Webhook Connections.
Our built-in HipChat CSE Action was deprecated in August 2022.
We're excited to announce the availability of the Closed Beta version of our updated Sumo Logic User Interface (UI). This release brings several enhancements aimed at improving your overall experience:
To explore these improvements, reach out to your Sumo Logic sales representative for access to the Closed Beta. We look forward to your feedback as we continue to refine our UI.
More information:
We're happy to announce an update of the Azure Blob Storage collection framework. Here are some of the key features that this update offers:
For upgrade instructions, refer to the changelog. For information on collecting logs from Azure Blob Storage, see our documentation.
We're happy to announce an update of the Azure metric collection framework. Here are some of the key features that this update offers:
Refer here for details on upgrade instructions and changelog. Also, for more information on metrics collection from Azure Monitor, see our documentation.
Update - Previously, for Sumo Logic customers on POV Trial plans, their accounts would be downgraded automatically to our Free plan at the end of their 45-day trial period. Effective today, these customers will be notified about their trial period expiration date in two different places in the UI: View details for the selected organizations and Child org table. Learn more.
We're excited to announce the new visualizations for Log Search queries with which you can customize each chart by modifying the available settings and obtain a unified experience with charts across the Sumo Logic platforms. Learn more.
We're excited to announce that we've introduced optimization improving the performance of Metrics queries that use aggregations (avg, min, max, sum or count) and which time range is within the last 24 hours.
Such queries are now faster, additionally allowing to aggregate data from a larger amount of time series.
We’re excited to announce the general availability of Cloud Infrastructure Security for AWS. This solution unifies views of active threats, security control failures, and suspicious activity across your AWS environment to give you security posture visibility at a glance.
This feature was previously only available in a preview form. It is now available for general use.
Here are some of the key features the new solution offers:
To learn how you can set up and use Cloud Infrastructure Security for AWS, check out our technical documentation.
To use the solution, you are required to sign up and activate Amazon GuardDuty and AWS Security Hub.
We're excited to announce an update for the Active Directory JSON - OpenTelemetry application to enhance efficiency and data collection. We are updating the sumo.datasource value from Active Directory to Windows. This change addresses the double data ingestion issue that occurs for customers who have installed both Active Directory and Windows apps and set up separate OpenTelemetry collections for each.
Data collected before the upgrade will not be visible in the Active Directory application.
If you have only the Active Directory JSON - OpenTelemetry app installed and decided to upgrade it, you will need to update your collection configuration according to the instructions below.
C:\ProgramData\Sumo Logic\OpenTelemetry Collector\config\conf.d.sumo.datasourcewindowsinsertRestart-Service -Name OtelcolSumo.If you have both the Windows - OpenTelemetry and Active Directory JSON - OpenTelemetry apps installed, you should remove the Active Directory OTEL YAML configuration from your machine to prevent double data ingestion. When upgrading the Active Directory app, there's no need to set up a new collection.
No changes are required if you only have Windows - OpenTelemetry installed.
We're happy to announce that our Account Overview page is updated and now you can get a detailed view of child org usages. Here are some of the key features that this update offers:
For more information, see our documentation on how to monitor credits allocation and usage.
We're excited to include the Index field as metadata at the bottom of every message row, along with other metadata. This allows you to modify the search query by clicking the index name or view surrounding messages by clicking on the dropdown. Learn more. 
This is an archive of the 2023 Sumo Logic Service Release Notes.
This is an archive of the 2022 Sumo Logic Service Release Notes.
This is an archive of the 2021 Sumo Logic Service Release Notes.
Release notes from 2016-2020 have been archived. If you need access to earlier versions, contact Support.