- 5 Minutes to read
- Print
- PDF
SumoLogic
- 5 Minutes to read
- Print
- PDF
About this document
This document provides the step-by-step procedure to configure SumoLogic in SAFE.
Introduction
SAFE integrates with SumoLogic and fetches the security misconfiguration of the SumoLogic account in SAFE.
Prerequisites
Access required in SAFE:
SAFE Admin Access
Access required in SumoLogic:
SumoLogic Admin
Required User Inputs:
API Instance URL
Access ID
Access Key
Asset Name in SAFE (optional)
Required Scope:
Admin Access
Generate Connection Details
How to generate Access ID
Log in to your SumoLogic account as Admin.
Click on the Profile icon at the bottom left corner
Click on the Preferences
Click on the + Add Access Key
Enter the Access Key Name
Click on the Create Key button
The system displays an Access ID and Access Key. Copy and save the Access ID and Access Key to use it later while configuring SumoLogic in SAFE.
It's important to regularly update the Access ID and Access Key in SAFE according to its expiration date.
How to get API Instance URL (Region Specific)
Access the SumoLogic API documentation by clicking on the provided link.
Upon reaching the SumoLogic API documentation page, locate the section titled as "API Endpoints".
Select endpoints specific to instance region
In the exhibit provided, find the base URL highlighted as 3. Copy and save this API URL to use it while configuring SumoLogic in SAFE
Configure SumoLogic in SAFE
Log in to your SAFE account as Admin.
Click on the Integrations option from the left navigation.
Scroll to find the SumoLogic integration card or search for SumoLogic in the search bar.
Hover over the SumoLogic integration card and click on the Configure button.
Enter the following:
API Instance URL
Access ID
Access Key
Asset Name in SAFE - Provide a unique identifier which can uniquely identify the asset
Enter the Auto Sync Frequency.
Click on the Test Connection button.
Once the connection is successful, click on the Save button.
Once the configuration is saved successfully, click on the Sync Now button to trigger an on-demand sync.
Upon a successful sync, the system pulls the SumoLogic assets and their findings in SAFE. You can track the status of the sync in the History table.
View Results
Go to the integration homepage
Scroll to find the SumoLogic integration card or search for SumoLogic in the search bar.
Click on the SumoLogic integration card for Finding View and Asset View.
Finding View: This tab displays all the findings details pulled from SumoLogic.
Asset View: This tab displays all the assets pulled from SumoLogic.
History
Learn More about Integration History here.
SAFE's Outgoing IP Addresses
Click here to find the outgoing IP addresses of SAFE. All traffic to any integrations in SAFE will see one IP address as the source IP of the incoming connection.
FAQs
For region specific information, contact your SumoLogic system administrator or refer to this.