Sumo Logic

No entries match these filters. Clear filters

1. Apps, Collection, and Automation Service Integrations - October Release (2026-10-30) Oct 30, 2026 · issue 128

   Sumo Logic adds user metrics dashboards to the GitHub Copilot app and migrates its C2C source to current endpoints with user metrics support.

   • Sumo Logic's GitHub Copilot app (v1.0.1) now adds user metrics dashboards and reflects the updated data schema.
   • Sumo Logic's GitHub Copilot C2C source (v2.0.0) migrates from legacy endpoints and adds user metrics support.

   2 details in Everything

   • Updated integration ZeroFox V2
   • Updated integration CrowdStrike Falcon
   • Updated integration Atlassian Jira Cloud
   • Updated integration Atlassian Jira V2
   • Updated integration ThreatConnect V3
2. Apps and Automation Service Integrations - October Release (2026-10-30) Oct 30, 2026 · issue 126

   Sumo Logic adds CTICTICyber Threat Intelligence: structured knowledge about adversaries — their tactics, infrastructure, and indicators — that tools consume to prioritize detections or enrich alerts with context. enrichment actions, CrowdStrike Case Management actions, and custom Jira priority support across five Automation service integrations⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • ZeroFox V2 now adds new CTI enrichment actions to the integration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Atlassian Jira Cloud integration now adds custom priority support for Cloud SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions. playbooks.
   • Atlassian Jira V2 integration now adds custom priority support for Cloud SOAR playbooks.
   • ThreatConnect V3 now adds tag modes to the Update Indicators action.
   • Claude Compliance v2.0.6 updates the Chats dashboard with tool information.
   • ZeroFox V2 now adds new CTI enrichment actions to the integration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   4 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !CrowdStrike Falcon legacy Incident actions are deprecated and may be removed in a future release.
3. Manage Features for Your Organization (Manage) (2026-10-30) Oct 30, 2026 · issue 126

   Sumo Logic adds self-service feature opt-in and opt-out controls for organizations directly in the Organizations UI⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Enable or disable a specific Sumo Logic feature for your organization without contacting support.
   📍In the Sumo Logic console, go to Organizations UI › Manage Features, then toggle the desired feature on or off for your organization.
4. JSON Unroll for HTTP Log Sources (Collection) (2026-10-28) Oct 28, 2026 · issue 124

   Sumo Logic adds JSON Unroll for HTTP log sources, automatically splitting JSON arrays into individual log messages while preserving top-level metadata.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

5. In-App Tabs for Dashboards and Metrics (Search) (2026-10-22) Oct 22, 2026 · issue 116

   Sumo Logic in-app tabs now support Dashboards and Metrics alongside Log Search in the New UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Enable in-app tabs so you can keep Log Search, Dashboard, and Metrics open simultaneously without extra browser tabs.
   📍In the New UI, go to your user Preferences and enable the Enable in-app tabs option. You can then open Log Search, Dashboard, and Metrics tabs side by side and switch between them without losing context.
6. Manage Features for Your Organization (Manage) (2026-10-19) Oct 19, 2026 · issue 125

   Sumo Logic adds a Manage Features capability letting paid customers opt in or out of features from the Organizations UI without contacting support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Enable or disable a Sumo Logic feature for your organization without filing a support ticket.
   📍In the Sumo Logic console, go to Organizations UI › Manage Features, then toggle the desired feature on or off for your organization.
   • Opt in or out of specific Sumo Logic features for your organization directly from the Organizations UI, without raising a support request.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 detail in Everything

7. Updated Retention Options for Metrics Transformation Rules (Manage) (2026-10-16) Oct 16, 2026 · issue 116

   Metrics transformation rules now support 400-day retention and Do Not Store, replacing the previous 15-day option.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Metrics transformation rules now offer Do Not Store or 400 days as retention options for matching metrics, and standardize aggregate retention for aggregated metrics to 400 days.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 detail in Everything

   └──▷ BREAKING ON UPGRADE

   • !Existing metrics transformation rules configured with 15-day retention are automatically migrated to 400-day retention.
8. Google Workspace Activities (Apps) (2026-10-14) Oct 14, 2026 · issue 108
   • New integration Sumo Logic app for Google Workspace Activities
9. Google Workspace Activities (Collection) (2026-10-12) Oct 12, 2026 · issue 105
   • New integration Google Workspace Activities source
10. Dynamic Timeslice Drilldown on Dashboard Log Panels (Dashboards) (2026-10-09) Oct 9, 2026 · issue 100

    Sumo Logic dashboards now auto-recalculate timeslice resolution when you zoom into a log panel time range.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Drill into a traffic spike on a log panel without touching the underlying query.
    📍In a Sumo Logic Dashboard, open a log panel displaying a timeslice-based chart. Click and drag over the spike region to zoom in — Sumo Logic automatically recalculates the timeslice and re-fetches the panel at the finer resolution.
11. OpenAI Source (Collection) (2026-10-08) Oct 8, 2026 · issue 107
    • New integration OpenAI source for Sumo Logic
12. Request Source Scoping for Scan Budgets (Manage) (2026-10-06) Oct 6, 2026 · issue 096

    Sumo Logic scan budgets can now be scoped to specific request sources — Search API, AI Search (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.), or Mobot — and managed via UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Enables scoping scan budgets to specific request sources, including Search API, AI Search (MCP), and Mobot, to control query cost per source.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds full UI management of the Stop all scans action within scan budget configuration.
    • Enables scoping scan budgets to specific request sources, including Search API, AI Search (MCP), and Mobot, to control query cost per source.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    1 more in Everything

13. 1.0.0 Oct 3, 2026 · issue 093

    API surface changed: 2 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    API change

    API surface changed: 2 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • ~ GET /v1/sourceTemplate: param platform (query) added
    • ~ GET /v1/sourceTemplates: param platform (query) added
    • GET /v1/sourceTemplate: param platform (query) added⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • GET /v1/sourceTemplates: param platform (query) added

    2 details in Everything

14. Stricter Validation for Boolean Expressions in Search Queries (Search) (2026-10-01) Oct 1, 2026 · release notes

    Sumo Logic now returns validation errors for incomplete Boolean expressions in new or edited monitors and scheduled searches.

    • Monitors, scheduled searches, and scheduled views now reject queries with invalid AND/OR syntax at save time instead of silently skipping operands.

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !Existing monitors, scheduled searches, or scheduled views containing incomplete Boolean expressions (e.g., | where success instead of | where success = true) will now fail with a validation error upon being edited or recreated; existing saved content continues to execute unchanged.
15. Apps, Solutions, and Collection Integrations - September Release (2026-09-30) Sep 30, 2026 · issue 091

    Sumo Logic adds four new Automation Service integrations and expands Azure AD, CrowdStrike, and Cloud SIEMCloud SIEMA Security Information and Event Management platform delivered as a hosted service, aggregating logs and alerts from across an environment to detect threats without requiring on-premises infrastructure. actions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds Initiate Delegated Auth, Exchange Device Code, and Reset User Password With Writeback actions to the Azure AD integration under Delegated (Device Code Flow) auth, plus new resource fields Authentication Type and Delegated Refresh Token.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds Delegated (Device Code Flow) authentication support to the Azure AD integration alongside existing Application (Client Credentials) auth.
    • Adds Get Insight Triage and Check Insight Triage Schedule actions to the Sumo Logic Cloud SIEM Automation Service integration.
    • Adds Check Submission Status action and OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. (Client Credentials) authentication support to the CrowdStrike Falcon Sandbox integration.
    • Adds Get Metric Data, List Metrics, and Get Metric Statistics metric actions to the AWS CloudWatchLogs integration.

    +3 more show less

    • Migrates Get Alert, Search Alerts, and Update Alert actions in the Microsoft GraphMicrosoft GraphMicrosoft's unified REST API for accessing data and services across Microsoft 365, Azure AD, and related cloud products, giving cyber tools a single authenticated endpoint to query users, emails, files, and sign-in logs. Security integration to the new alerts_v2 API.
    • Adds four new Automation Service integrations: AWS DynamoDB, Intel 471, Verity, and Mimecast V2.
    • Adds filtering support to the List Users action in the 1Password integration.
    • Adds Initiate Delegated Auth, Exchange Device Code, and Reset User Password With Writeback actions to the Azure AD integration under Delegated (Device Code Flow) auth, plus new resource fields Authentication Type and Delegated Refresh Token.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds Delegated (Device Code Flow) authentication support to the Azure AD integration alongside existing Application (Client Credentials) auth.
    • Adds Get Insight Triage and Check Insight Triage Schedule actions to the Sumo Logic Cloud SIEM Automation Service integration.
    • Adds Check Submission Status action and OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. (Client Credentials) authentication support to the CrowdStrike Falcon Sandbox integration.
    • Adds Get Metric Data, List Metrics, and Get Metric Statistics metric actions to the AWS CloudWatchLogs integration.

    +1 more show less

    • Adds four new Automation Service integrations: AWS DynamoDB, Intel 471, Verity, and Mimecast V2.

    2 more in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Microsoft Graph Security legacy /security/alerts endpoint is deprecated and will be retired on October 15, 2026; Get Alert, Search Alerts, and Update Alert now call alerts_v2, which is not a one-to-one replacement — some alerts may be unavailable through the new endpoint.
16. Amazon Security Lake (Apps) (2026-09-29) Sep 29, 2026 · issue 089

    New Sumo Logic app for Amazon Security Lake delivers unified AWS security visibility via OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work.-normalized events and pre-built dashboards.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds a new Sumo Logic app for Amazon Security Lake that provides unified visibility into AWS security activity across accounts and regions using OCSF-normalized events.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Includes pre-built dashboards covering network, identity, application, and host activity to detect threats, investigate anomalies, and assess AWS security posture.

    2 details in Everything

17. 1.0.0 Sep 26, 2026 · issue 086

    API surface changed: −2 endpoints, 1 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    API change

    API surface changed: −2 endpoints, 1 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • ~ GET /v1/threatIntel/datastore/db: response schema changed
    • − GET /v1/threatIntel/datastore/retentionPeriod (breaking)
    • − POST /v1/threatIntel/datastore/retentionPeriod (breaking)
    └──▷ BREAKING ON UPGRADE

    • !Removed endpoint GET /v1/threatIntel/datastore/retentionPeriod
    • !Removed endpoint POST /v1/threatIntel/datastore/retentionPeriod
18. Mobot Now Answers Ingest Volume and Billing Questions (Manage) (2026-09-25) Sep 25, 2026 · issue 085

    Mobot gains a Data Volume skill to answer natural-language ingest and billing questions without manual queries.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ HOW TO FIND IT
    Ask Mobot to surface your noisiest sources so you can prioritize ingestion cost reduction.
    📍In Mobot, type: What are my top 10 source categories by daily ingest volume?
    Reconcile tier usage for finance reporting without writing a manual query.
    📍In Mobot, type: How much data went to the Infrequent tier last month?
    • Adds the Data Volume skill to Mobot's Platform Optimization Agent, enabling natural-language questions about ingest volume, tier usage, source-category breakdowns, and spend attribution — available to all users with no opt-in required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    1 detail in Everything

19. AWS Observability Version 3.0.0 (Apps) (2026-09-22) Sep 22, 2026 · issue 091

    AWS Observability v3.0.0 delivers a full rewrite with expanded region coverage, Terraform Module deployment, and next-gen app dashboards.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds Terraform Module support for AWSO solution deployment, including release versioning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Expands AWS region support to non-SAM regions and three newly supported regions: Asia Pacific (Melbourne), Asia Pacific (New Zealand), and Europe (Zurich).
    • Automatically configures appropriate Load Balancer policies for AWS regions launched after August 2022.
    • Adds next-generation application support with out-of-the-box dashboards, monitors, FERs, and metric rules.
    • Adds Terraform Module support for AWSO solution deployment, including release versioning.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Automatically configures appropriate Load Balancer policies for AWS regions launched after August 2022.
    • Adds next-generation application support with out-of-the-box dashboards, monitors, FERs, and metric rules.

    1 more in Everything

20. Search Job API Architectural Improvements (Search) (2026-09-21) Sep 21, 2026 · issue 083

    Search Job Management API goes OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth.-compliant, stateless, and adds parent-child org support for MSSPMSSPA Managed Security Service Provider: a third-party company that operates cyber tooling and monitoring on behalf of clients, letting organizations outsource detection, response, and compliance functions. automation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Search Job Management API is now fully OpenAPI-compliant, enabling auto-generated SDKs in any language and native integration with Postman and CI/CD pipelines.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Long-running search jobs can now be polled via the Search Job Management API without session cookies, making them compatible with AI agents and Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. (MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.) frameworks.
    • MSSPs and enterprise admins can now automate parent-child and cross-org searches via the Search Job Management API, a capability previously limited to the UI.
    • Search Job Management API is now fully OpenAPI-compliant, enabling auto-generated SDKs in any language and native integration with Postman and CI/CD pipelines.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • MSSPs and enterprise admins can now automate parent-child and cross-org searches via the Search Job Management API, a capability previously limited to the UI.

    1 more in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Search Job Management API no longer uses session cookies — any client that stored or sent cookies to authenticate requests must migrate to the jobId-based stateless request model.
21. Content and Configuration Management APIs for MSSPs (Manage) (2026-09-10) Sep 10, 2026 · issue 070

    Sumo Logic C3M APIs now GA, letting MSSPMSSPA Managed Security Service Provider: a third-party company that operates cyber tooling and monitoring on behalf of clients, letting organizations outsource detection, response, and compliance functions. parent orgs programmatically push Cloud SIEMCloud SIEMA Security Information and Event Management platform delivered as a hosted service, aggregating logs and alerts from across an environment to detect threats without requiring on-premises infrastructure. rules, monitors, and templates to child orgs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

22. 1.0.0 Aug 31, 2026 · issue 060

    API surface changed: +7 endpoints, 5 modified

    API change

    API surface changed: +7 endpoints, 5 modified

    • + GET /v1/multi-account-management/content/sync
    • + GET /v1/multi-account-management/content/sync/{jobId}/info
    • + GET /v1/multi-account-management/content/sync/{jobId}/result
    • + GET /v1/multi-account-management/content/sync/{jobId}/status
    • + POST /v1/multi-account-management/content/sync
    • + POST /v1/multi-account-management/content/sync/{jobId}/cancel
    • + POST /v1/multi-account-management/content/sync/{jobId}/retry
    • ~ GET /v1/sourceTemplate: param fleetIds (query) added
    • ~ GET /v1/sourceTemplates: param fleetIds (query) added
    • ~ POST /v1/budgets: request body changed
    • ~ POST /v1/otCollectors: request body changed
    • ~ PUT /v1/budgets/{budgetId}: request body changed
    • New endpoint GET /v1/multi-account-management/content/sync
    • New endpoint GET /v1/multi-account-management/content/sync/{jobId}/info
    • New endpoint GET /v1/multi-account-management/content/sync/{jobId}/result
    • New endpoint GET /v1/multi-account-management/content/sync/{jobId}/status
    • New endpoint POST /v1/multi-account-management/content/sync

    +7 more show less

    • New endpoint POST /v1/multi-account-management/content/sync/{jobId}/cancel
    • New endpoint POST /v1/multi-account-management/content/sync/{jobId}/retry
    • GET /v1/sourceTemplate: param fleetIds (query) added
    • GET /v1/sourceTemplates: param fleetIds (query) added
    • POST /v1/budgets: request body changed
    • POST /v1/otCollectors: request body changed
    • PUT /v1/budgets/{budgetId}: request body changed

    12 details in Everything

23. SOC Analyst Agent Support in Child Org Baselines (Manage) (2026-08-31) Aug 31, 2026 · issue 060

    Sumo Logic lets you provision the SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. Analyst Agent as part of a child org baseline, with configurable daily investigation limits.

    • Enables provisioning of the SOC Analyst Agent when creating or editing a child org baseline, with controls for Number of investigations per day and optional overage alongside existing Logs, Metrics, Traces, and Cloud SIEMCloud SIEMA Security Information and Event Management platform delivered as a hosted service, aggregating logs and alerts from across an environment to detect threats without requiring on-premises infrastructure. Enterprise baselines.

    1 detail in Everything

24. Apps, Solutions, and Collection Integrations - August Release (2026-08-31) Aug 31, 2026 · issue 060

    Sumo Logic adds Druva app, four GA automation integrations, PostgreSQL support for Cloud SQL, and two new Terraform resources.

    • Adds two new resources to the SumoLogic Terraform Provider v3.3.0: sumologic_async_aws_lambda_invocation and sumologic_s3_logging_lambda_enable.
    • New Sumo Logic app for Druva - Platform Events enables monitoring of Druva via a webhook-based integration.
    • Four Automation Service Integrations are now generally available: AWS Lambda, DFIR-IRISDFIR-IRISAn open-source incident-response case management platform that lets analysts track investigations, share findings, and link evidence — giving cyber tools a structured backend to feed alerts and artefacts into., Google Cloud Functions, and LaunchDarkly.
    • Google Cloud SQL source adds support for PostgreSQL instances.
    • Akamai SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. API v1.2.26 adds parser path support.

    +1 more show less

    • Miro app and source updated to a new API version, removing dependency on the deprecated Audit Log API v2, with new out-of-the-box monitors added.

    6 details in Everything

25. Auto-Refresh Guardrails for Dashboards (Dashboards) (2026-08-31) Aug 31, 2026 · issue 060

    Sumo Logic dashboards gain auto-refresh guardrails: hidden-tab pause after 10 min and panel exclusion after 5 consecutive failures.

    • Adds hidden tab pause guardrail: auto-refresh pauses when you navigate away from a dashboard tab for more than 10 minutes and resumes automatically on return.
    • Adds panel failure exclusion guardrail: a panel is dropped from auto-refresh after 5 consecutive query failures, preventing it from disrupting other healthy panels.

    2 details in Everything

26. Increased Maximum Log Message Size to 256KB (Search) (2026-08-27) Aug 27, 2026 · release notes

    Sumo Logic increases maximum supported log message size from 64KB to 256KB

27. Support for Longer Dashboard Time Ranges (Dashboards) (2026-08-25) Aug 25, 2026 · issue 056

    Sumo Logic dashboards now support time ranges beyond 32 days when backed by aggregate scheduled views or aggregate scheduled searches.

    • Extends dashboard query time ranges beyond the previous 32-day limit when using aggregate scheduled searches, aggregate scheduled views, or a combination of both.

    1 detail in Everything

28. Changes to the Save to Index Alert Type for Scheduled Searches (Alerts) (2026-08-24) Aug 24, 2026 · issue 055

    Scheduled searches with Save to Index now save unlimited results per run; the 512-result cap is removed.

    • Removes the 512-result-per-run cap for scheduled searches using the Save to Index alert type, so every result returned by a run is now saved to the view.
    • The _raw field is now empty for aggregate query results saved to a ScheduledSearchView; all values remain accessible in their individual named fields (e.g. _count, batch, parsedfield).

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !For scheduled searches using the Save to Index alert type with aggregate queries, the _raw (Message) field is now empty — any downstream query that uses parse against _raw, searches plain-text keywords from the message body, or reads the Message column to get field values will break and must be updated to reference named fields directly.
    • !The 512-result-per-run limit for Save to Index scheduled searches is removed; searches that run frequently (e.g. every 15 minutes) without a limit operator may now save significantly more data per run than before.
29. 1.0.0 Aug 23, 2026 · issue 054

    API surface changed: 1 modified

    API change

    API surface changed: 1 modified

    • ~ POST /v2/search/jobs: request body changed
    • POST /v2/search/jobs: request body changed

    1 detail in Everything

30. 1.0.0 Aug 20, 2026 · issue 051

    API surface changed: +5 endpoints, 12 modified

    API change

    API surface changed: +5 endpoints, 12 modified

    • + DELETE /v2/search/jobs/{jobId}
    • + GET /v2/search/jobs/{jobId}
    • + GET /v2/search/jobs/{jobId}/messages
    • + GET /v2/search/jobs/{jobId}/records
    • + POST /v2/search/jobs
    • ~ GET /v1/sourceTemplate: response schema changed
    • ~ GET /v1/sourceTemplate/{id}: response schema changed
    • ~ GET /v1/sourceTemplates: response schema changed
    • ~ GET /v1/sourceTemplates/{id}: response schema changed
    • ~ POST /v1/sourceTemplate: request body changed; response schema changed
    • ~ POST /v1/sourceTemplate/{id}: request body changed; response schema changed
    • ~ POST /v1/sourceTemplates: request body changed; response schema changed
    • ~ POST /v1/sourceTemplates/{id}: request body changed; response schema changed
    • ~ POST /v1/sourceTemplates/{id}/upgrade: response schema changed
    • ~ POST /v1/upgrade/sourceTemplate/{id}: response schema changed
    • ~ PUT /v1/sourceTemplate/{id}/status: response schema changed
    • ~ PUT /v1/sourceTemplates/{id}/status: response schema changed
    • New endpoint DELETE /v2/search/jobs/{jobId}
    • New endpoint GET /v2/search/jobs/{jobId}
    • New endpoint GET /v2/search/jobs/{jobId}/messages
    • New endpoint GET /v2/search/jobs/{jobId}/records
    • New endpoint POST /v2/search/jobs

    +12 more show less

    • GET /v1/sourceTemplate: response schema changed
    • GET /v1/sourceTemplate/{id}: response schema changed
    • GET /v1/sourceTemplates: response schema changed
    • GET /v1/sourceTemplates/{id}: response schema changed
    • POST /v1/sourceTemplate: request body changed; response schema changed
    • POST /v1/sourceTemplate/{id}: request body changed; response schema changed
    • POST /v1/sourceTemplates: request body changed; response schema changed
    • POST /v1/sourceTemplates/{id}: request body changed; response schema changed
    • POST /v1/sourceTemplates/{id}/upgrade: response schema changed
    • POST /v1/upgrade/sourceTemplate/{id}: response schema changed
    • PUT /v1/sourceTemplate/{id}/status: response schema changed
    • PUT /v1/sourceTemplates/{id}/status: response schema changed

    17 details in Everything

31. Multi-Notification Support for Scheduled Searches (Alerts) (2026-08-19) Aug 19, 2026 · issue 050

    Scheduled Searches now support up to 10 independent notifications per search, all sharing one trigger condition.

32. AI Parse Assist (Search) (2026-08-17) Aug 17, 2026 · issue 048

    Sumo Logic adds AI Parse Assist to auto-generate parse statements and field names from highlighted log text.

    • New AI Parse Assist feature automatically generates a parse statement and field names from any text highlighted in a log message, accelerating query building for complex or unfamiliar log formats.

    1 detail in Everything

33. 1.0.0 Aug 14, 2026 · issue 045

    API surface changed: 6 modified

    API change

    API surface changed: 6 modified

    • ~ GET /v1/otCollectors/otCollectorsByName: response schema changed
    • ~ GET /v1/otCollectors/{id}: response schema changed
    • ~ GET /v1/plan/pendingUpdateRequest: response schema changed
    • ~ POST /v1/otCollectors: response schema changed
    • ~ POST /v1/sourceTemplate: param dryRun (query) added
    • ~ POST /v1/sourceTemplates: param dryRun (query) added
    • GET /v1/otCollectors/otCollectorsByName: response schema changed
    • GET /v1/otCollectors/{id}: response schema changed
    • GET /v1/plan/pendingUpdateRequest: response schema changed
    • POST /v1/otCollectors: response schema changed
    • POST /v1/sourceTemplate: param dryRun (query) added

    +1 more show less

    • POST /v1/sourceTemplates: param dryRun (query) added

    6 details in Everything

34. Create Dashboard Panels with Mobot (Dashboards) (2026-08-13) Aug 13, 2026 · issue 045

    Sumo Logic Mobot gains a new skill to create dashboard panels from plain-language prompts.

    • New Mobot skill lets practitioners describe a desired panel in plain language, after which Mobot drafts the query, selects a visualization, and adds the panel to a new or existing dashboard.

    1 detail in Everything

35. Create and Manage Archive Destinations via API (Manage) (2026-08-13) Aug 13, 2026 · issue 045

    Sumo Logic adds a public API for creating and managing AWS S3 archive destinations for Installed Collectors.

36. Drill Down from Map Charts (Dashboards) (2026-08-11) Aug 11, 2026 · issue 042

    Sumo Logic dashboards gain Shift+click drill-down on map charts, auto-populating Log Search with lat/long values.

    └──▷ HOW TO FIND IT
    Investigate suspicious geo-located traffic without manually hunting for coordinates — jump straight from a map chart to a filtered log search.
    📍In a dashboard map chart, Shift+click a point or line on the map. Sumo Logic opens the Log Search page with the query pre-populated with the latitude and longitude for that location.
    • Adds Shift+click on map chart points or lines in dashboards to drill down into that location's data, automatically redirecting to Log Search with the query updated with the corresponding latitude and longitude values.

    1 detail in Everything

37. 1.0.0 Aug 8, 2026 · issue 039

    API surface changed: +2 endpoints, 3 modified

    API change

    API surface changed: +2 endpoints, 3 modified

    • + GET /v1/featureSettings
    • + PUT /v1/featureSettings
    • ~ POST /v1/oauth/clients: request body changed; response schema changed
    • ~ PUT /v1/oauth/clients/{id}: request body changed
    • ~ PUT /v1/oauth/clients/{id}/rotate: response schema changed
    • New endpoint GET /v1/featureSettings
    • New endpoint PUT /v1/featureSettings
    • POST /v1/oauth/clients: request body changed; response schema changed
    • PUT /v1/oauth/clients/{id}: request body changed
    • PUT /v1/oauth/clients/{id}/rotate: response schema changed

    5 details in Everything

38. Threat Intelligence (Security) (2026-08-06) Aug 6, 2026 · issue 038

    Sumo Logic adds threatlookup operator for searching threat intelligence indicators directly in log data.

    • New threatlookup operator enables searching threat intelligence indicators against log data in Sumo Logic queries.
    • Threat intelligence indicator search and Cloud SIEMCloud SIEMA Security Information and Event Management platform delivered as a hosted service, aggregating logs and alerts from across an environment to detect threats without requiring on-premises infrastructure. entity enrichment now default to active indicators only.

    2 details in Everything

39. Manage Playbooks with Mobot (Automation Service) (2026-08-05) Aug 5, 2026 · issue 037

    Sumo Logic lets you build and update Automation Service playbooks by describing them in plain language to Mobot.

    • Mobot now supports playbook creation and editing via natural-language chat: describe the automation you want, Mobot checks available integrations, asks clarifying questions, proposes a plan, configures each step, and saves the result as a draft for review and publishing.

    1 detail in Everything

40. Credit Block Burn Rates (Manage) (2026-08-03) Aug 3, 2026 · issue 034

    Sumo Logic now tracks mid-subscription credit purchases as separate blocks, preserving original burn rates.

    • Tracks additional credits purchased mid-subscription as a separate credit block, so original credits continue burning at their original rate without being repriced.

    1 detail in Everything

41. Apps, Solutions, and Collection Integrations - July Release (2026-07-31) Jul 31, 2026 · issue 032

    Sumo Logic adds new dashboards, FERs, and monitors across 18+ apps, plus a new Terraform resource for Lambda invoke actions.

    • Adds new and updated dashboards, field extraction rules (FERs), and monitors for Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. 2012+ (JSON), Artifactory 7, Azure Audit, ChatGPT Compliance, Cisco Meraki, Cloudflare Enterprise Audit - Cloud SIEMCloud SIEMA Security Information and Event Management platform delivered as a hosted service, aggregating logs and alerts from across an environment to detect threats without requiring on-premises infrastructure., Heroku, Host and Process Metrics, Host Metrics Linux, LiteLLM, Microsoft Office 365, Windows 2012+ (JSON), Windows 7+2008 (Legacy), Windows CSMA, Windows Performance, Zscaler Internet Access, and Zscaler Private Access.
    • Migrates Azure Metrics collection from legacy ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware.-based collection to the latest Azure Metrics Source.
    • Adds new Terraform resource sumologic_lambda_invoke_action in SumoLogic Terraform Provider v3.2.9.

    3 details in Everything

42. Create Monitors with Mobot (Search) (2026-07-31) Jul 31, 2026 · issue 031

    Sumo Logic's Mobot can now create and update logs monitors from plain-language prompts, skipping the monitor form entirely.

    └──▷ HOW TO FIND IT
    When you want to spin up a logs monitor quickly without navigating the monitor form.
    📍In Mobot, type a plain-language prompt such as "Create a monitor that alerts when error rate exceeds 5% in the last 15 minutes for the prod environment", review the suggested configuration, then confirm to create it.
    • Enables creation and updating of logs monitors in Mobot via plain-language prompts, with a review-and-confirm workflow before saving.

    1 detail in Everything

43. Mobot Now Generally Available with a Unified Conversational Interface (Search) (2026-07-30) Jul 30, 2026 · issue 031

    Mobot, Sumo Logic's AI conversational assistant, is now GA with unified log analysis, content creation, and Cloud SIEMCloud SIEMA Security Information and Event Management platform delivered as a hosted service, aggregating logs and alerts from across an environment to detect threats without requiring on-premises infrastructure. investigation in one interface.

    └──▷ HOW TO FIND IT
    Investigate a spike in failed logins across your logs without writing any query syntax — Mobot plans and runs the analysis and surfaces notable findings inline.
    📍In the Sumo Logic console, open Mobot and type: "Show me failed login attempts in the last 24 hours and identify any unusual source IPs."
    Create a monitor through conversation so you can set up alerting without navigating the UI manually — Mobot confirms before anything goes live.
    📍In the Sumo Logic console, open Mobot and type: "Create a monitor that alerts me when error rate exceeds 5% over a 15-minute window."
    Continue a Cloud SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. investigation in Mobot to enrich an insight with log context without switching tools.
    📍In Cloud SIEM, open an insight and select Continue in Mobot to carry the full insight context into a Mobot conversation for deeper log analysis.
    • Mobot is now generally available as a unified conversational interface — ask plain-language questions across log investigation, platform how-tos, and Cloud SIEM without selecting an agent or writing query syntax.
    • Log Analysis Agent performs multi-step log analysis, returns inline results with notable findings, and recommends next steps automatically.
    • Enables creation and management of monitors and dashboards through conversation, with a confirmation step before any changes go live.
    • Conversational playbook management for Automation Service is rolling out within Mobot.
    • Cloud SIEM integration lets SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. analysts continue a SOC Analyst Agent investigation inside Mobot with full insight context.

    +1 more show less

    • Automatic intent routing replaces manual agent selection — Mobot internally routes each prompt to the Log Analysis Agent or Platform Optimization Agent as appropriate.

    6 details in Everything

44. Searchable Time Support for Monitors (Alerts) (2026-07-22) Jul 22, 2026 · issue 022

    Sumo Logic Monitors now support Searchable Time, letting alerts evaluate logs based on when they became searchable.

45. Theme and Resolution Options for Dashboard PDF and PNG Exports (Dashboards) (2026-07-10) Jul 10, 2026 · issue 014

    Sumo Logic dashboard PDF/PNG exports gain theme selection, up-to-6000px resolution, and per-panel time range support.

    └──▷ HOW TO FIND IT
    Generate a high-resolution dark-themed dashboard export for a SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. display wall or executive report.
    📍In the dashboard, go to Export › Export as PDF (or PNG), select Dark theme, set resolution to 6000 pixels, then click Export.
    • Adds Light or Dark theme selection when exporting dashboards to PDF or PNG and in scheduled reports.
    • Supports configurable export resolution from 1,500 to 6,000 pixels for sharper output on large displays.
    • Enables per-panel time range in PDF/PNG exports — panels with overridden time ranges now use their own range instead of the dashboard-level range.

    3 details in Everything

46. Include Query and Results in Monitor Email Notifications (Manage) (2026-07-09) Jul 9, 2026 · issue 014

    Sumo Logic monitor email notifications can now embed the triggering search query and result set inline.

    └──▷ USE IT
    Attach the triggering query and matching results to a monitor's email notification so on-call responders have full context without logging into Sumo Logic.
    json copy

    {
      "notifications": [
        {
          "notification": {
            "connectionType": "Email",
            "recipients": ["soc-team@example.com"],
            "subject": "Monitor Alert: {{Name}}",
            "includeQuery": true,
            "includeResultSet": true
          },
          "runForTriggerTypes": ["Critical", "ResolvedCritical"]
        }
      ]
    }

    • Adds includeQuery and includeResultSet flags to monitor email notifications, embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. the search query and results directly in alert emails.

    1 detail in Everything

47. Choose the Timestamp Format for Alert Notifications (Manage) (2026-07-08) Jul 8, 2026 · issue 014

    Sumo Logic adds Notification Settings Standards policy to control timestamp format (Legacy or ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability.) in alert payloads.

    └──▷ HOW TO FIND IT
    Switch alert notification timestamps to ISO 8601 format for easier parsing in downstream SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. or automation pipelines.
    📍In the Sumo Logic console, go to Administration › Policies › Notification Settings Standards and select ISO as the date/time format for alert and recovery notification payloads.
    • New Notification Settings Standards policy lets org admins choose between Legacy and ISO date/time formats for alert and recovery notification payloads.

    1 detail in Everything

48. Copy a Dashboard Panel (Dashboards) (2026-07-07) Jul 7, 2026 · issue 014

    Sumo Logic Dashboards now lets you copy any panel to another dashboard without rebuilding the query.

    └──▷ HOW TO FIND IT
    Reuse a tuned threat-hunting panel across multiple team dashboards without manually recreating the underlying query.
    📍In the Dashboards console, open the source panel menu and select Copy to Dashboard, then choose an existing dashboard or create a new one as the destination.
    • New Copy to Dashboard action enables copying an existing dashboard panel to another dashboard or a new dashboard, preserving the original query.

    1 detail in Everything

49. Go To Search Bar Enhancements (2026-07-07) Jul 7, 2026 · issue 014

    Sumo Logic's Go To search bar now surfaces Library content, Monitors, and SLOs alongside navigation pages.

    └──▷ HOW TO FIND IT
    Jump directly to a monitor or SLOSLOA Service Level Objective is a target threshold for a system's reliability or performance, such as 99.9% uptime or sub-200ms latency, giving cyber tools a measurable contract to enforce or report against. by name without leaving your current view — use the Go To bar as a universal finder across Library items, Monitors, and SLOs.
    📍In the console, press the Go To search bar (top of the UI), type the name of a dashboard, monitor, or SLO, and select the matching result from the dropdown.
    • Enables Go To search bar to find dashboards, searches, and folders saved in the Library.
    • Adds Monitor discovery by name directly from the Go To search bar.
    • Adds SLO lookup from the Go To search bar without navigating to the SLO page.
    • Introduces no-match behavior: returns 0 results instead of unrelated suggestions when nothing meets the relevance threshold.

    4 details in Everything

50. Dashboard Sections Scan Estimate (Dashboards) (2026-07-03) Jul 3, 2026 · issue 014

    Sumo Logic Dashboards now show scan estimates at both dashboard and section levels for clearer cost/data visibility.

    └──▷ HOW TO FIND IT
    Quickly assess total scan cost across an entire dashboard before running heavy queries.
    📍In the dashboard view, click the meter icon (top toolbar) to see estimated scan data split by active and collapsed panels.
    Isolate scan cost to a specific dashboard section to identify which panel group is driving high data usage.
    📍In the dashboard view, locate the target section header and click its meter icon to view the scan estimate for panels within that section only.
    • Adds dashboard-level scan estimates: click the meter icon to view estimated scan data broken down by active and collapsed panels.
    • Adds section-level scan estimates: click the meter icon on any section header to view estimated scan data for panels within that section.

    2 details in Everything

51. App Upgrade Email Notifications (Apps) (2026-07-02) Jul 2, 2026 · issue 014

    Sumo Logic Next-Gen apps now support email notifications for future app upgrades, with self-service subscribe/unsubscribe.

    └──▷ HOW TO FIND IT
    Subscribe to upgrade notifications when installing a Next-Gen app so your team is alerted to new versions automatically.
    📍In the Sumo Logic App Catalog, install a Next-Gen app and opt in to email notifications during the installation flow. To unsubscribe later, navigate to the installed app in the App Catalog and select the unsubscribe option.
    • Adds opt-in email notifications for Next-Gen app upgrades, including app name, new version, release notes, and a direct App Catalog link.
    • Enables users with the Manage Apps capability to subscribe or unsubscribe from upgrade notifications for apps installed by others.
    • Automatically removes upgrade notifications when a Next-Gen app is uninstalled.

    3 details in Everything

52. New user onboarding now defaults to the New UI (2026-07-02) Jul 2, 2026 · issue 014

    New Sumo Logic users and orgs now onboard directly into the New UI by default.

    └──▷ HOW TO FIND IT
    New users who prefer the previous layout can revert immediately after signing up.
    📍In the New UI, open the left navigation menu and select Switch to classic UI.
    • New UI is now the default onboarding experience for all new Sumo Logic users and organizations; Classic UI remains accessible via Switch to classic UI in the left navigation menu.

    1 detail in Everything

53. Apps, Solutions, and Collection Integrations - June Release (2026-06-30) Jun 30, 2026 · issue 014

    Sumo Logic adds Amazon Overview app, Next-Gen app migrations, and hashing support in 14 updated Source Templates.

    • New Amazon Overview app delivers unified visibility into AWS service activity, performance, and health metrics across your cloud environment.
    • Adds new dashboards, monitor alerts, and an IDPIDPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. category to Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. 2012+ (OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor.), Active Directory 2012+ (JSON), Auth0, Azure Active Directory, JumpCloud Directory Insights, and OneLogin apps.
    • Adds a custom_gpt selection variable to the ChatGPT Compliance app dashboard for easier filtering, alongside updated queries aligned to the latest log format.
    • Introduces hashing support for fields in filelog receiver-based Source Templates, enabling sensitive field obfuscation at collection time.
    • Adds field table validation to filelog receiver-based Source Templates to catch misconfigurations before data is collected.

    +2 more show less

    • Migrates 13 Classic Apps (Amazon DynamoDB, ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping., ElastiCache, RDS, SNSSNSAmazon Simple Notification Service, a managed pub/sub messaging service from AWS that lets tools fan out alerts or events to multiple subscribers — queues, email, HTTP endpoints, or Lambda functions — without managing broker infrastructure., SQS, AWS ALBALBAWS Application Load Balancer, a managed Layer 7 load balancer from Amazon that routes HTTP/HTTPS traffic by host, path, or header, giving tools flexible ingress control without managing their own proxy., API Gateway, Classic Load Balancer, EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. CW Metrics, EC2 Host Metrics, Lambda, Network Load Balancer) to the Next-Gen Apps framework.
    • VMware Tanzu Integration v1.0.9 adds compatibility with VMware Tanzu Application Service 10.4.0 Small Footprint Elastic Application Runtime and updates deprecated HttpStart/HttpStop event types.

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The deprecated batch processor has been removed from the OpenTelemetry configuration for Active Directory 2012+ - OpenTelemetry; the updated configuration requires Sumo Logic OpenTelemetry Agent version 0.153 or later.
    • !The deprecated batch processor configurations have been removed from 14 Source Templates; setups using those configurations must be updated to ensure compatibility with current collector versions.
54. Unified Threat Intelligence Configuration and Management (2026-06-26) Jun 26, 2026 · issue 014

    Sumo Logic unifies Threat Intelligence source configuration and indicator uploads into a single Data Management hub.

    └──▷ HOW TO FIND IT
    Onboard a new threat intel source and review its indicator count from the unified console — no page-switching required.
    📍In the console, go to Data Management › Threat Intelligence, click Add Source, select your threat intelligence source, choose a collector, and complete the configuration wizard.
    Push a custom set of indicators (e.g., IOCsIOCsAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. from an incident) directly into Threat Intelligence without a formal source integration.
    📍In the console, go to Data Management › Threat Intelligence, then use the manual upload indicators option to import your indicator file.
    • Centralizes Threat Intelligence management under Data Management > Threat Intelligence, replacing fragmented multi-page navigation.
    • New Add Source flow lets analysts select a threat intel source, choose a collector, and complete configuration in one guided workflow.
    • New manual indicator upload option allows practitioners to add indicators directly without a separate source integration.
    • Updated Sources listing page surfaces Status, Source Name, Description, Storage Consumed, and Number of Indicators at a glance.

    4 details in Everything

55. Manage Features for Child Organizations (MSSP) (2026-06-24) Jun 24, 2026 · issue 014

    MSSPMSSPA Managed Security Service Provider: a third-party company that operates cyber tooling and monitoring on behalf of clients, letting organizations outsource detection, response, and compliance functions. admins can now opt child orgs in/out of Sumo Logic features directly from the Organizations UI.

    └──▷ HOW TO FIND IT
    Enable or disable a specific Sumo Logic feature for an individual child organization without contacting support.
    📍In the Sumo Logic console, go to Administration › Organizations, select a child organization, then use the Manage Features option to toggle individual features on or off.
56. Sumo Logic Deployment in AWS European Sovereign Cloud Region (2026-06-15) Jun 15, 2026 · issue 014

    Sumo Logic launches a new service region in AWS European Sovereign Cloud for strict EU data residency and compliance.

    • New Sumo Logic deployment region in AWS European Sovereign Cloud supports EU data residency, sovereignty controls, and compliance requirements.
    • Enables organizations operating under strict European regulatory frameworks to run log analytics, security monitoring, and observability workloads with reduced latency.

    2 details in Everything

57. 2.12.0 May 1, 2025 · release notes

    Sumo Logic v2.12 adds Threat Intel integration for AWS apps and OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. OTRM Source Templates

    • Adds integration with the new Threat Intel feed to nine AWS observability apps and four monitors
    • Releases 14 OpenTelemetry (OTRM) Source Templates to simplify log and metric collection from various systems
    • Migrates 28 classic apps to next-gen versions for easier management

    3 details in Everything