Cloud SIEM APIs

The Cloud SIEM API allows you to create and manage Entities, Custom Insights, log mappings, Match Lists, Network Blocks and other Cloud SIEM features.

Documentation

To get started with Sumo Logic APIs, see API Authentication, Endpoints, and Security.

Our APIs are built with OpenAPI. You can generate client libraries in several languages and explore automated testing.

To access our API documentation, navigate to the appropriate link based on your Sumo deployment. Deployment types differ based on geographic location and account creation date. If unsure, see Which endpoint should I use?

Deployment	Documentation URL
AU	https://api.au.sumologic.com/docs/sec/
CA	https://api.ca.sumologic.com/docs/sec/
DE	https://api.de.sumologic.com/docs/sec/
FED	https://api.fed.sumologic.com/docs/sec/
EU	https://api.eu.sumologic.com/docs/sec/
IN	https://api.in.sumologic.com/docs/sec/
JP	https://api.jp.sumologic.com/docs/sec/
KR	https://api.kr.sumologic.com/docs/sec/
US1	https://api.sumologic.com/docs/sec/
US2	https://api.us2.sumologic.com/docs/sec/

Required role capabilities

To use the APIs in this resource, the user or account executing APIs must have the following role capabilities:

• Cloud SIEM (all role capabilities)