Sumo Logic — API

Sumo Logic APIv1.0.0 Read the vendor's spec ↗

441 endpoints
7 deprecated
11 versions archived since Jul 20, 2026
Last checked Nov 2, 2026

Using curl:

first call

$ curl "https://api.au.sumologic.com/api/v1/account/status" \
  -u "$USERNAME:$PASSWORD"

Set $USERNAME and $PASSWORD first, then paste.

Base URL: https://api.au.sumologic.com/api/

10 more

https://api.ca.sumologic.com/api/ CA deployment API server
https://api.ch.sumologic.com/api/ CH deployment API server
https://api.de.sumologic.com/api/ DE deployment API server
https://api.eu.sumologic.com/api/ EU deployment API server
https://api.fed.sumologic.com/api/ FED deployment API server
https://api.jp.sumologic.com/api/ JP deployment API server
https://api.kr.sumologic.com/api/ KR deployment API server
https://api.in.sumologic.com/api/ IN deployment API server
https://api.sumologic.com/api/ US1 deployment API server
https://api.us2.sumologic.com/api/ US2 deployment API server
Authenticate: HTTP basic: username and password
Shape: GET202
POST114
PUT66
PATCH1
DELETE58

What it covers

Monitors 22 Monitor Management API.
Policies 20 Policies management API.
Parsers Library Management 18 Parsers Library Management API Customize the Parsers via this API.
Dashboard (New) 17 Dashboard (New) management API.
SLOs 16 SLO Management API.
Source Template Management 16 Source Template Management APIs.
Traces 15 Traces API The Traces API allows you to browse traces collected in the system.
Content 13 Content management API.
Folders 13 Folder management API.
Account 12 Account Management API.
Muting Schedules 12 Muting Schedules Management API.
Apps V2 (Beta) 11 App installation API (V2).

46 more areas

Field Management 10 Field management API.
Logs Data Forwarding 10 Logs Data Forwarding management API.
SAML Configuration 10 SAML configuration management API Organizations with Enterprise accounts can provision Security Assertion Markup Language (SAML) 2.0 to enable Single Sign-On (SSO) for user access to Sumo Logic.
Service Accounts 10 APIs to manage service accounts
Span Analytics 10 Span Analytics API The Span Analytics API allows you to browse spans collected in the system.
Users 10 User management API.
Lookup Tables 9 Lookup Table management API.
OAuth Management (Beta) 9 Only available to Beta customers.
Scheduled Views 8 Scheduled View management API.
Access Keys 7 Access Key management API.
Budget Management 7 Budget Management API.
Connections 7 Connection management API.
Content and Configuration Management 7 Content and Configuration Management API.
Partitions 7 Partition management API.
Roles 7 Role management API.
Roles V2 7 Role management API (V2).
Data Masking Rules (Beta) 6 Data Masking Rules (Beta) API.
Event Analytics (Beta) 6 Event Analytics (Beta) API.
Ingest Budgets V2 6 Ingest Budget management API V2.
OpenTelemetry Collector Management 6 OT Collector Management API External.
SCIM User Management 6 APIs to manage scim based users.
Service Allowlist 6 Service Allowlist management API Service Allowlist Settings allow you to explicitly grant access to specific IP addresses and/or CIDR notations for logins, APIs, and dashboard access.
Data Archiving 5 Data Archiving API.
Data Deletion Rules (Beta) 5 Data Deletion Rules (Beta) API.
Dynamic Parsing 5 Dynamic Parsing management API.
Field Extraction Rules 5 Field Extraction Rule management API.
Log Searches 5 Log Searches Management API.
Macro Management APIs 5 Macro Management APIs.
Metrics Searches (New) 5 New Metrics Searches Management API.
Search Job 5 Search Job API.
Tokens 5 Tokens management API.
Transformation Rules 5 Transformation Rule management API.
Apps (Beta) 4 App installation API.
Archive Ingestion Management 4 Archive Ingestion Management API.
Log Search Estimated Usage 4 Log Search Estimated Usage API.
Metrics Searches (Beta) 4 Metrics Search management API.
Permissions 3 Content permissions API.
Threat Intel Datastore Management 3 Threat Intel Datastore Management API The Threat Intel Datastore Management API allows you to: Get information about the threat indicator datastore and sources.
Threat Intel Ingestion 3 Threat Intel Ingestion API The Threat Intel Ingestion API allows you to: Upload threat intel indicators in STIX 2.x or Sumo normalized format.
Health Events 2 Health Events management API.
Org Feature Settings 2 Org Feature Settings API The APIs allow you to view and update settings of some features for the Org.
Password Policy 2 Password Policy Management API The password policy controls how user passwords are managed.
Metrics Query 1 Metrics Query API.
Organizations Management 1 Organizations Management API.
Schema Base Management 1 Schema Base Management APIs.
Service Map 1 Service Map API The Service Map API allows you to fetch a graph representation of the Services Map, which is a high-level view of your application environment, automatically derived from tracing data.

Open an endpoint for a runnable command, its inputs and what it returns.

Monitors 22

DELETE /v1/monitors Bulk delete a monitor or folder.

Loading…
DELETE /v1/monitors/{id} Delete a monitor or folder.

Loading…
GET /v1/monitors Bulk read a monitor or folder.

Loading…
GET /v1/monitors/path Read a monitor or folder by its path.

Loading…
GET /v1/monitors/playbooks List all playbooks.

Loading…
GET /v1/monitors/playbooksDetails Get playbook details.

Loading…
GET /v1/monitors/root Get the root monitors folder.

Loading…
GET /v1/monitors/search Search for a monitor or folder.

Loading…
GET /v1/monitors/usageInfo Usage info of monitors.

Loading…
GET /v1/monitors/{id} Get a monitor or folder.

Loading…
GET /v1/monitors/{id}/export Export a monitor or folder.

Loading…
GET /v1/monitors/{id}/path Get the path of a monitor or folder.

Loading…
GET /v1/monitors/{id}/permissionSummariesBySubjects List permission summaries for a monitor or folder.

Loading…
GET /v1/monitors/{id}/permissions List explicit permissions on monitor or folder.

Loading…
POST /v1/monitors Create a monitor or folder.

Loading…
POST /v1/monitors/{id}/copy Copy a monitor or folder.

Loading…
POST /v1/monitors/{id}/move Move a monitor or folder.

Loading…
POST /v1/monitors/{parentId}/import Import a monitor or folder.

Loading…
PUT /v1/monitors/disable Disable monitors.

Loading…
PUT /v1/monitors/permissions/revoke Revoke all permissions on monitor or folder.

Loading…
PUT /v1/monitors/permissions/set Set permissions on monitor or folder.

Loading…
PUT /v1/monitors/{id} Update a monitor or folder.

Loading…

Policies 20

GET /v1/policies/accessKeysLifetime Get access key lifetime policy.

Loading…
GET /v1/policies/audit Get Audit policy.

Loading…
GET /v1/policies/dataAccessLevel Get Data Access Level policy.

Loading…
GET /v1/policies/dataDeletion Get Data Deletion policy.

Loading…
GET /v1/policies/maxUserSessionTimeout Get Max User Session Timeout policy.

Loading…
GET /v1/policies/oAuthCimd Get OAuth policy for Client ID Metadata Documents (CIMD) authentication.

Loading…
GET /v1/policies/searchAudit Get Search Audit policy.

Loading…
GET /v1/policies/shareDashboardsOutsideOrganization Get Share Dashboards Outside Organization policy.

Loading…
GET /v1/policies/timestampFormat Get Alert Timestamp Format policy.

Loading…
GET /v1/policies/userConcurrentSessionsLimit Get User Concurrent Sessions Limit policy.

Loading…
PUT /v1/policies/accessKeysLifetime Set access keys lifetime policy.

Loading…
PUT /v1/policies/audit Set Audit policy.

Loading…
PUT /v1/policies/dataAccessLevel Set Data Access Level policy.

Loading…
PUT /v1/policies/dataDeletion Set Data Deletion policy.

Loading…
PUT /v1/policies/maxUserSessionTimeout Set Max User Session Timeout policy.

Loading…
PUT /v1/policies/oAuthCimd Set OAuth policy for Client ID Metadata Documents (CIMD) authentication.

Loading…
PUT /v1/policies/searchAudit Set Search Audit policy.

Loading…
PUT /v1/policies/shareDashboardsOutsideOrganization Set Share Dashboards Outside Organization policy.

Loading…
PUT /v1/policies/timestampFormat Set Alert Timestamp Format policy.

Loading…
PUT /v1/policies/userConcurrentSessionsLimit Set User Concurrent Sessions Limit policy.

Loading…

Parsers Library Management 18

DELETE /v1/parsers Bulk delete folders and parsers.

Loading…
DELETE /v1/parsers/{id} Delete a folder or parser.

Loading…
GET /v1/parsers Bulk read folders and parsers.

Loading…
GET /v1/parsers/path Read a folder or parser by its path.

Loading…
GET /v1/parsers/root Get the root folder in the library.

Loading…
GET /v1/parsers/search Search for folders or parsers.

Loading…
GET /v1/parsers/{id} Read a folder or parser.

Loading…
GET /v1/parsers/{id}/export Export a folder or parser.

Loading…
GET /v1/parsers/{id}/path Get full path of folder or parser.

Loading…
POST /v1/parsers Create a folder or parser.

Loading…
POST /v1/parsers/{id}/copy Copy a folder or parser.

Loading…
POST /v1/parsers/{id}/lock Lock a folder or a parser.

Loading…
POST /v1/parsers/{id}/move Move a folder or parser.

Loading…
POST /v1/parsers/{id}/unlock Unlock a folder or a parser.

Loading…
POST /v1/parsers/{parentId}/import Import a folder or parser

Loading…
POST /v1/system/parsers/{id}/lock Lock a folder or a parser.

Loading…
POST /v1/system/parsers/{id}/unlock Unlock a folder or a parser.

Loading…
PUT /v1/parsers/{id} Update a folder or parser.

Loading…

Dashboard (New) 17

DELETE /v1/dashboards/reportSchedules/{scheduleId} Delete dashboard report schedule.

Loading…
DELETE /v2/dashboards/{id} Delete a dashboard.

Loading…
GET /v1/dashboards/reportSchedules List all dashboard report schedules.

Loading…
GET /v1/dashboards/reportSchedules/{scheduleId} Get dashboard report schedule.

Loading…
GET /v2/dashboards List all dashboards.

Loading…
GET /v2/dashboards/migrate/{jobId}/result Get dashboard migration result.

Loading…
GET /v2/dashboards/migrate/{jobId}/status Get dashboard migration status.

Loading…
GET /v2/dashboards/reportJobs/{jobId}/result Get report generation job result

Loading…
GET /v2/dashboards/reportJobs/{jobId}/status Get report generation job status

Loading…
GET /v2/dashboards/{id} Get a dashboard.

Loading…
POST /v1/dashboards/reportSchedules Schedule dashboard report

Loading…
POST /v2/dashboards Create a new dashboard.

Loading…
POST /v2/dashboards/migrate Migrate Legacy Dashboards to Dashboards(New)

Loading…
POST /v2/dashboards/migrate/preview Preview of Migrating Legacy Dashboards to Dashboards(New)

Loading…
POST /v2/dashboards/reportJobs Start a report job

Loading…
PUT /v1/dashboards/reportSchedules/{scheduleId} Update dashboard report schedule.

Loading…
PUT /v2/dashboards/{id} Update a dashboard.

Loading…

SLOs 16

DELETE /v1/slos Bulk delete a slo or folder.

Loading…
DELETE /v1/slos/{id} Delete a slo or folder.

Loading…
GET /v1/slos Bulk read a slo or folder.

Loading…
GET /v1/slos/path Read a slo or folder by its path.

Loading…
GET /v1/slos/root Get the root slos folder.

Loading…
GET /v1/slos/search Search for a slo or folder.

Loading…
GET /v1/slos/sli Bulk fetch SLI values, error budget remaining and SLI computation status for the current compliance period.

Loading…
GET /v1/slos/usageInfo Usage info of SLOs.

Loading…
GET /v1/slos/{id} Get a slo or folder.

Loading…
GET /v1/slos/{id}/export Export a slo or folder.

Loading…
GET /v1/slos/{id}/path Get the path of a slo or folder.

Loading…
POST /v1/slos Create a slo or folder.

Loading…
POST /v1/slos/{id}/copy Copy a slo or folder.

Loading…
POST /v1/slos/{id}/move Move a slo or folder.

Loading…
POST /v1/slos/{parentId}/import Import a slo or folder.

Loading…
PUT /v1/slos/{id} Update a slo or folder.

Loading…

Source Template Management 16

DELETE /v1/sourceTemplate/{id} Delete a source template (deprecated). deprecated

Loading…
DELETE /v1/sourceTemplates/{id} Delete a source template.

Loading…
GET /v1/sourceTemplate Return all source templates of a customer (deprecated). deprecated

Loading…
GET /v1/sourceTemplate/{id} Get a source template by Id (deprecated). deprecated

Loading…
GET /v1/sourceTemplates List all source templates.

Loading…
GET /v1/sourceTemplates/{id} Get a source template by Id.

Loading…
POST /v1/sourceTemplate Create source template (deprecated). deprecated

Loading…
POST /v1/sourceTemplate/getLinkedSourceTemplatesImpact Get linked source templates update based on the ot-collector tags user is wants to update.

Loading…
POST /v1/sourceTemplate/{id} Update source template (deprecated). deprecated

Loading…
POST /v1/sourceTemplates Create source template.

Loading…
POST /v1/sourceTemplates/getLinkedSourceTemplatesImpact Preview source template linking changes.

Loading…
POST /v1/sourceTemplates/{id} Update source template.

Loading…
POST /v1/sourceTemplates/{id}/upgrade Upgrade source template.

Loading…
POST /v1/upgrade/sourceTemplate/{id} Upgrade source template (deprecated). deprecated

Loading…
PUT /v1/sourceTemplate/{id}/status Update status of source template (deprecated) deprecated

Loading…
PUT /v1/sourceTemplates/{id}/status Update status of source template

Loading…

Traces 15

DELETE /v1/tracing/tracequery/{queryId} Cancel a trace search query.

Loading…
GET /v1/tracing/metrics Get trace search query metrics.

Loading…
GET /v1/tracing/tracequery/fields Get filter fields for trace search queries.

Loading…
GET /v1/tracing/tracequery/fields/{field}/values Get trace search query filter field values.

Loading…
GET /v1/tracing/tracequery/{queryId}/rows/{rowId}/traces Get results of a trace search query.

Loading…
GET /v1/tracing/tracequery/{queryId}/status Get a trace search query status.

Loading…
GET /v1/tracing/traces/{traceId} Get trace details.

Loading…
GET /v1/tracing/traces/{traceId}/criticalPath Get a critical path of a trace.

Loading…
GET /v1/tracing/traces/{traceId}/criticalPath/breakdown/service Get a critical path service breakdown of a trace.

Loading…
GET /v1/tracing/traces/{traceId}/exists Check if the trace exists.

Loading…
GET /v1/tracing/traces/{traceId}/spans Get a list of trace spans.

Loading…
GET /v1/tracing/traces/{traceId}/spans/{spanId} Get span details.

Loading…
GET /v1/tracing/traces/{traceId}/spans/{spanId}/billingInfo Get span billing details.

Loading…
GET /v1/tracing/traces/{traceId}/traceEvents Get a list of events (without their attributes) per span for a trace.

Loading…
POST /v1/tracing/tracequery Run a trace search query asynchronously.

Loading…

Content 13

DELETE /v2/content/{id}/delete Start a content deletion job.

Loading…
GET /v2/content/folders/{folderId}/import/{jobId}/result Content import job result.

Loading…
GET /v2/content/folders/{folderId}/import/{jobId}/status Content import job status.

Loading…
GET /v2/content/path Get content item by path.

Loading…
GET /v2/content/{contentId}/export/{jobId}/result Content export job result.

Loading…
GET /v2/content/{contentId}/export/{jobId}/status Content export job status.

Loading…
GET /v2/content/{contentId}/path Get path of an item.

Loading…
GET /v2/content/{id}/copy/{jobId}/status Content copy job status.

Loading…
GET /v2/content/{id}/delete/{jobId}/status Content deletion job status.

Loading…
POST /v2/content/folders/{folderId}/import Start a content import job.

Loading…
POST /v2/content/{id}/copy Start a content copy job.

Loading…
POST /v2/content/{id}/export Start a content export job.

Loading…
POST /v2/content/{id}/move Move an item.

Loading…

Folders 13

GET /v2/content/folders/adminRecommended Schedule Admin Recommended folder job

Loading…
GET /v2/content/folders/adminRecommended/{jobId}/result Get Admin Recommended folder job result

Loading…
GET /v2/content/folders/adminRecommended/{jobId}/status Get Admin Recommended folder job status

Loading…
GET /v2/content/folders/global Schedule Global View job

Loading…
GET /v2/content/folders/global/{jobId}/result Get Global View job result

Loading…
GET /v2/content/folders/global/{jobId}/status Get Global View job status

Loading…
GET /v2/content/folders/installedApps Schedule Installed Apps folder job

Loading…
GET /v2/content/folders/installedApps/{jobId}/result Get Installed Apps folder job result

Loading…
GET /v2/content/folders/installedApps/{jobId}/status Get Installed Apps folder job status

Loading…
GET /v2/content/folders/personal Get personal folder.

Loading…
GET /v2/content/folders/{id} Get a folder.

Loading…
POST /v2/content/folders Create a new folder.

Loading…
PUT /v2/content/folders/{id} Update a folder.

Loading…

Account 12

DELETE /v1/account/subdomain Delete the configured subdomain.

Loading…
DELETE /v1/plan/pendingUpdateRequest Delete the pending plan update request, if any.

Loading…
GET /v1/account/accountOwner Get the owner of an account.

Loading…
GET /v1/account/status Get overview of the account status.

Loading…
GET /v1/account/subdomain Get the configured subdomain.

Loading…
GET /v1/account/usage/report/{jobId}/status Get report generation status.

Loading…
GET /v1/account/usageForecast Get usage forecast with respect to last number of days specified.

Loading…
GET /v1/plan/pendingUpdateRequest Get the pending plan update request, if any.

Loading…
POST /v1/account/subdomain Create account subdomain.

Loading…
POST /v1/account/subdomain/recover Recover subdomains for a user.

Loading…
POST /v1/account/usage/report Export credits usage details as CSV.

Loading…
PUT /v1/account/subdomain Update account subdomain.

Loading…

Muting Schedules 12

DELETE /v1/mutingSchedules Bulk delete a mutingschedule or folder.

Loading…
DELETE /v1/mutingSchedules/{id} Delete a mutingschedule or folder.

Loading…
GET /v1/mutingSchedules Bulk read a mutingschedule or folder.

Loading…
GET /v1/mutingSchedules/root Get the root mutingSchedules folder.

Loading…
GET /v1/mutingSchedules/search Search for a mutingschedule or folder.

Loading…
GET /v1/mutingSchedules/{id} Get a mutingschedule or folder.

Loading…
GET /v1/mutingSchedules/{id}/export Export a mutingschedule or folder.

Loading…
GET /v1/mutingSchedules/{id}/path Get the path of a mutingschedule or folder.

Loading…
POST /v1/mutingSchedules Create a mutingschedule or folder.

Loading…
POST /v1/mutingSchedules/{id}/copy Copy a mutingschedule or folder.

Loading…
POST /v1/mutingSchedules/{parentId}/import Import a mutingschedule or folder.

Loading…
PUT /v1/mutingSchedules/{id} Update a mutingschedule or folder.

Loading…

Apps V2 (Beta) 11

DELETE /v2/apps/{uuid}/subscription Unsubscribe from an app upgrade notification

Loading…
GET /v2/apps List apps

Loading…
GET /v2/apps/install/{jobId}/status App install job status

Loading…
GET /v2/apps/uninstall/{jobId}/status App uninstall job status

Loading…
GET /v2/apps/upgrade/{jobId}/status App upgrade job status

Loading…
GET /v2/apps/{uuid}/details Get details of an app version.

Loading…
GET /v2/apps/{uuid}/subscription Get subscription status for the user

Loading…
POST /v2/apps/{uuid}/install Start app install job

Loading…
POST /v2/apps/{uuid}/subscription Subscribe to an app upgrade notification

Loading…
POST /v2/apps/{uuid}/uninstall Start app uninstall job

Loading…
POST /v2/apps/{uuid}/upgrade Start app upgrade job

Loading…

Field Management 10

DELETE /v1/fields/{id} Delete a custom field.

Loading…
DELETE /v1/fields/{id}/disable Disable a custom field.

Loading…
GET /v1/fields Get a list of all custom fields.

Loading…
GET /v1/fields/builtin Get a list of built-in fields.

Loading…
GET /v1/fields/builtin/{id} Get a built-in field.

Loading…
GET /v1/fields/dropped Get a list of dropped fields.

Loading…
GET /v1/fields/quota Get capacity information.

Loading…
GET /v1/fields/{id} Get a custom field.

Loading…
POST /v1/fields Create a new field.

Loading…
PUT /v1/fields/{id}/enable Enable custom field with a specified identifier.

Loading…

Logs Data Forwarding 10

DELETE /v1/logsDataForwarding/destinations/{id} Delete an S3 data forwarding destination.

Loading…
DELETE /v1/logsDataForwarding/rules/{indexId} Delete an S3 data forwarding rule by its index.

Loading…
GET /v1/logsDataForwarding/destinations Get Amazon S3 data forwarding destinations.

Loading…
GET /v1/logsDataForwarding/destinations/{id} Get an S3 data forwarding destination.

Loading…
GET /v1/logsDataForwarding/rules Get all S3 data forwarding rules.

Loading…
GET /v1/logsDataForwarding/rules/{indexId} Get an S3 data forwarding rule by its index.

Loading…
POST /v1/logsDataForwarding/destinations Create an S3 data forwarding destination.

Loading…
POST /v1/logsDataForwarding/rules Create an S3 data forwarding rule.

Loading…
PUT /v1/logsDataForwarding/destinations/{id} Update an S3 data forwarding destination.

Loading…
PUT /v1/logsDataForwarding/rules/{indexId} Update an S3 data forwarding rule by its index.

Loading…

SAML Configuration 10

DELETE /v1/saml/allowlistedUsers/{userId} Remove an allowlisted user.

Loading…
DELETE /v1/saml/identityProviders/{id} Delete a SAML configuration.

Loading…
GET /v1/saml/allowlistedUsers Get list of allowlisted users.

Loading…
GET /v1/saml/identityProviders Get a list of SAML configurations.

Loading…
GET /v1/saml/identityProviders/{id}/metadata Get SAML configuration metadata XML.

Loading…
POST /v1/saml/allowlistedUsers/{userId} Allowlist a user.

Loading…
POST /v1/saml/identityProviders Create a new SAML configuration.

Loading…
POST /v1/saml/lockdown/disable Disable SAML lockdown.

Loading…
POST /v1/saml/lockdown/enable Require SAML for sign-in.

Loading…
PUT /v1/saml/identityProviders/{id} Update a SAML configuration.

Loading…

Service Accounts 10

DELETE /v1/serviceAccounts/{id} Delete a service account.

Loading…
DELETE /v1/serviceAccounts/{serviceAccountId}/accessKeys/{accessId} Delete an access key of a service account.

Loading…
GET /v1/serviceAccounts Get a list of service accounts.

Loading…
GET /v1/serviceAccounts/{id} Get a service account.

Loading…
GET /v1/serviceAccounts/{serviceAccountId}/accessKeys List access keys for a service account.

Loading…
GET /v1/serviceAccounts/{serviceAccountId}/accessKeys/{accessId} Get an access key of a service account.

Loading…
POST /v1/serviceAccounts Create a new service account.

Loading…
POST /v1/serviceAccounts/{serviceAccountId}/accessKeys Create a new access key for a service account.

Loading…
PUT /v1/serviceAccounts/{id} Update a service account.

Loading…
PUT /v1/serviceAccounts/{serviceAccountId}/accessKeys/{accessId} Update an access key of a service account.

Loading…

Span Analytics 10

DELETE /v1/tracing/spanquery/{queryId} Cancel a span analytics query.

Loading…
GET /v1/tracing/spanquery/fields Get filter fields for span analytics queries.

Loading…
GET /v1/tracing/spanquery/fields/{field}/values Get span analytics query filter field values.

Loading…
GET /v1/tracing/spanquery/{queryId}/aggregates Get span analytics query aggregated results.

Loading…
GET /v1/tracing/spanquery/{queryId}/rows/{rowId}/facets Get a list of facets of a span analytics query.

Loading…
GET /v1/tracing/spanquery/{queryId}/rows/{rowId}/spans Get results of a span analytics query.

Loading…
GET /v1/tracing/spanquery/{queryId}/status Get a span analytics query status.

Loading…
POST /v1/tracing/spanquery Run a span analytics query asynchronously.

Loading…
PUT /v1/tracing/spanquery/{queryId}/pause Pause a span analytics query.

Loading…
PUT /v1/tracing/spanquery/{queryId}/resume Resume a span analytics query.

Loading…

Users 10

DELETE /v1/users/{id} Delete a user.

Loading…
GET /v1/users Get a list of users.

Loading…
GET /v1/users/{id} Get a user.

Loading…
POST /v1/users Create a new user.

Loading…
POST /v1/users/{id}/email/requestChange Change email address.

Loading…
POST /v1/users/{id}/password/reset Reset password.

Loading…
POST /v1/users/{id}/resendWelcomeEmail Resend verification email.

Loading…
POST /v1/users/{id}/unlock Unlock a user.

Loading…
PUT /v1/users/{id} Update a user.

Loading…
PUT /v1/users/{id}/mfa/disable Disable MFA for user.

Loading…

Lookup Tables 9

DELETE /v1/lookupTables/{id} Delete a lookup table.

Loading…
GET /v1/lookupTables/jobs/{jobId}/status Get the status of an async job.

Loading…
GET /v1/lookupTables/{id} Get a lookup table.

Loading…
POST /v1/lookupTables Create a lookup table.

Loading…
POST /v1/lookupTables/{id}/truncate Empty a lookup table.

Loading…
POST /v1/lookupTables/{id}/upload Upload a CSV file.

Loading…
PUT /v1/lookupTables/{id} Edit a lookup table.

Loading…
PUT /v1/lookupTables/{id}/deleteTableRow Delete a lookup table row.

Loading…
PUT /v1/lookupTables/{id}/row Insert or Update a lookup table row.

Loading…

OAuth Management (Beta) 9

DELETE /v1/oauth/clients/{id} Delete an OAuth client.

Loading…
DELETE /v1/oauth/consents/{consentId} Delete an OAuth consent.

Loading…
GET /v1/oauth/clients List the OAuth clients.

Loading…
GET /v1/oauth/clients/{id} Get an OAuth client.

Loading…
GET /v1/oauth/consents List OAuth consents.

Loading…
GET /v1/oauth/scopes Get all scopes.

Loading…
POST /v1/oauth/clients Create a new OAuth client.

Loading…
PUT /v1/oauth/clients/{id} Update an OAuth client.

Loading…
PUT /v1/oauth/clients/{id}/rotate Rotate the oauth client secret

Loading…

Scheduled Views 8

DELETE /v1/scheduledViews/{id}/disable Disable a scheduled view.

Loading…
GET /v1/scheduledViews Get a list of scheduled views.

Loading…
GET /v1/scheduledViews/quota Provides information about scheduled views quota.

Loading…
GET /v1/scheduledViews/{id} Get a scheduled view.

Loading…
POST /v1/scheduledViews Create a new scheduled view.

Loading…
POST /v1/scheduledViews/{id}/pause Pause a scheduled view.

Loading…
POST /v1/scheduledViews/{id}/start Start a scheduled view.

Loading…
PUT /v1/scheduledViews/{id} Update a scheduled view.

Loading…

Access Keys 7

DELETE /v1/accessKeys/{id} Delete an access key.

Loading…
GET /v1/accessKeys List all access keys.

Loading…
GET /v1/accessKeys/personal List personal keys.

Loading…
GET /v1/accessKeys/scopes Get all scopes.

Loading…
POST /v1/accessKeys Create an access key.

Loading…
PUT /v1/accessKeys/{id} Update an access key.

Loading…
PUT /v1/accessKeys/{id}/rotate Rotate the access key secret

Loading…

Budget Management 7

DELETE /v1/budgets/{budgetId} Delete budget

Loading…
GET /v1/budgets Get budgets

Loading…
GET /v1/budgets/usage Get budget usages

Loading…
GET /v1/budgets/{budgetId} Get budget

Loading…
GET /v1/budgets/{budgetId}/usage Get budget usage

Loading…
POST /v1/budgets Creates a budget definition

Loading…
PUT /v1/budgets/{budgetId} Update budget

Loading…

Connections 7

DELETE /v1/connections/{id} Delete a connection.

Loading…
GET /v1/connections Get a list of connections.

Loading…
GET /v1/connections/{id} Get a connection.

Loading…
POST /v1/connections Create a new connection.

Loading…
POST /v1/connections/incidentTemplates Get incident templates for CloudSOAR connections.

Loading…
POST /v1/connections/test Test a new connection url.

Loading…
PUT /v1/connections/{id} Update a connection.

Loading…

Content and Configuration Management 7

GET /v1/multi-account-management/content/sync Get Content Sync Job Id.

Loading…
GET /v1/multi-account-management/content/sync/{jobId}/info Get Information of Content Sync Job by ID.

Loading…
GET /v1/multi-account-management/content/sync/{jobId}/result Get Result of Content Sync Job by ID.

Loading…
GET /v1/multi-account-management/content/sync/{jobId}/status Get Status of Content Sync Job.

Loading…
POST /v1/multi-account-management/content/sync Sync Content and Configuration across Organization.

Loading…
POST /v1/multi-account-management/content/sync/{jobId}/cancel Cancel Content Sync Job by ID

Loading…
POST /v1/multi-account-management/content/sync/{jobId}/retry Retry Content Sync Job by ID

Loading…

Partitions 7

GET /v1/partitions Get a list of partitions.

Loading…
GET /v1/partitions/quota Provides information about partitions quota.

Loading…
GET /v1/partitions/{id} Get a partition.

Loading…
POST /v1/partitions Create a new partition.

Loading…
POST /v1/partitions/{id}/cancelRetentionUpdate Cancel a retention update for a partition

Loading…
POST /v1/partitions/{id}/decommission Decommission a partition.

Loading…
PUT /v1/partitions/{id} Update a partition.

Loading…

Roles 7

DELETE /v1/roles/{id} Delete a role.

Loading…
DELETE /v1/roles/{roleId}/users/{userId} Remove role from a user.

Loading…
GET /v1/roles Get a list of roles.

Loading…
GET /v1/roles/{id} Get a role.

Loading…
POST /v1/roles Create a new role.

Loading…
PUT /v1/roles/{id} Update a role.

Loading…
PUT /v1/roles/{roleId}/users/{userId} Assign a role to a user.

Loading…

Roles V2 7

DELETE /v2/roles/{id} Delete a role.

Loading…
DELETE /v2/roles/{roleId}/users/{userId} Remove role from a user.

Loading…
GET /v2/roles Get a list of roles.

Loading…
GET /v2/roles/{id} Get a role.

Loading…
POST /v2/roles Create a new role.

Loading…
PUT /v2/roles/{id} Update a role.

Loading…
PUT /v2/roles/{roleId}/users/{userId} Assign a role to a user.

Loading…

Data Masking Rules (Beta) 6

DELETE /v1/dataMaskingRules/{id} Delete a data masking rule.

Loading…
GET /v1/dataMaskingRules Get a list of data masking rules.

Loading…
GET /v1/dataMaskingRules/{id} Get a data masking rule.

Loading…
POST /v1/dataMaskingRules Create a new data masking rule.

Loading…
POST /v1/dataMaskingRules/evaluate Test and preview a regex pattern by evaluating it against sample input text.

Loading…
PUT /v1/dataMaskingRules/{id} Update a data masking rule.

Loading…

Event Analytics (Beta) 6

DELETE /v1/eventExtractionRules/{id} Delete an event extraction rule.

Loading…
GET /v1/eventExtractionRules Get all event extraction rules.

Loading…
GET /v1/eventExtractionRules/quota Get event extraction rules quota.

Loading…
GET /v1/eventExtractionRules/{id} Get an event extraction rule.

Loading…
POST /v1/eventExtractionRules Create event extraction rule.

Loading…
PUT /v1/eventExtractionRules/{id} Update an event extraction rule.

Loading…

Ingest Budgets V2 6

DELETE /v2/ingestBudgets/{id} Delete an ingest budget.

Loading…
GET /v2/ingestBudgets Get a list of ingest budgets.

Loading…
GET /v2/ingestBudgets/{id} Get an ingest budget.

Loading…
POST /v2/ingestBudgets Create a new ingest budget.

Loading…
POST /v2/ingestBudgets/{id}/usage/reset Reset usage.

Loading…
PUT /v2/ingestBudgets/{id} Update an ingest budget.

Loading…

OpenTelemetry Collector Management 6

DELETE /v1/otCollectors/offline Delete all Offline OT Collectors

Loading…
DELETE /v1/otCollectors/{id} Delete an OT Collector.

Loading…
GET /v1/otCollectors/otCollectorsByName Get OT Collectors by name.

Loading…
GET /v1/otCollectors/totalCount Get a count of OT Collectors.

Loading…
GET /v1/otCollectors/{id} Get OT Collector by ID.

Loading…
POST /v1/otCollectors Get paginated list of OT Collectors

Loading…

SCIM User Management 6

DELETE /v1/scim/Users/{id} Delete SCIM User

Loading…
GET /v1/scim/Users List SCIM Users

Loading…
GET /v1/scim/Users/{id} Get a SCIM User

Loading…
PATCH /v1/scim/Users/{id} Update SCIM User Attributes

Loading…
POST /v1/scim/Users Create SCIM User

Loading…
PUT /v1/scim/Users/{id} Update SCIM User

Loading…

Service Allowlist 6

GET /v1/serviceAllowlist/addresses List all allowlisted CIDRs/IP addresses.

Loading…
GET /v1/serviceAllowlist/status Get the allowlisting status.

Loading…
POST /v1/serviceAllowlist/addresses/add Allowlist CIDRs/IP addresses.

Loading…
POST /v1/serviceAllowlist/addresses/remove Remove allowlisted CIDRs/IP addresses.

Loading…
POST /v1/serviceAllowlist/disable Disable service allowlisting.

Loading…
POST /v1/serviceAllowlist/enable Enable service allowlisting.

Loading…

Data Archiving 5

DELETE /v1/dataarchiving/destinations/{id} Delete a data archiving destination.

Loading…
GET /v1/dataarchiving/destinations Get all data archiving destinations.

Loading…
GET /v1/dataarchiving/destinations/{id} Get a data archiving destination.

Loading…
POST /v1/dataarchiving/destinations Create a data archiving destination.

Loading…
PUT /v1/dataarchiving/destinations/{id} Update a data archiving destination.

Loading…

Data Deletion Rules (Beta) 5

DELETE /v1/dataDeletionRules/{id}/delete Delete the data Deletion Rule with the given Id.

Loading…
GET /v1/dataDeletionRules Get a list of Data Deletion Rules

Loading…
GET /v1/dataDeletionRules/{id} Get Data Deletion Rule information for the given Id.

Loading…
POST /v1/dataDeletionRules Create a new Data Deletion Rule

Loading…
POST /v1/dataDeletionRules/{id}/cancel Cancel the data Deletion Rule with the given Id.

Loading…

Dynamic Parsing 5

DELETE /v1/dynamicParsingRules/{id} Delete a dynamic parsing rule.

Loading…
GET /v1/dynamicParsingRules Get a list of dynamic parsing rules.

Loading…
GET /v1/dynamicParsingRules/{id} Get a dynamic parsing rule.

Loading…
POST /v1/dynamicParsingRules Create a new dynamic parsing rule.

Loading…
PUT /v1/dynamicParsingRules/{id} Update a dynamic parsing rule.

Loading…

Field Extraction Rules 5

DELETE /v1/extractionRules/{id} Delete a field extraction rule.

Loading…
GET /v1/extractionRules Get a list of field extraction rules.

Loading…
GET /v1/extractionRules/{id} Get a field extraction rule.

Loading…
POST /v1/extractionRules Create a new field extraction rule.

Loading…
PUT /v1/extractionRules/{id} Update a field extraction rule.

Loading…

Log Searches 5

DELETE /v1/logSearches/{id} Delete the saved log search.

Loading…
GET /v1/logSearches List all saved log searches.

Loading…
GET /v1/logSearches/{id} Get the saved log search.

Loading…
POST /v1/logSearches Save a log search.

Loading…
PUT /v1/logSearches/{id} Update the saved log Search.

Loading…

Macro Management APIs 5

DELETE /v2/macros/{id} Delete a macro.

Loading…
GET /v2/macros List all macros.

Loading…
GET /v2/macros/{id} Get a macro.

Loading…
POST /v2/macros Create a new macro.

Loading…
PUT /v2/macros/{id} Edit a macro.

Loading…

Metrics Searches (New) 5

DELETE /v2/metricsSearches/{id} Delete a metrics search page.

Loading…
GET /v2/metricsSearches List all metrics search pages.

Loading…
GET /v2/metricsSearches/{id} Get a metrics search page.

Loading…
POST /v2/metricsSearches Create a new metrics search page.

Loading…
PUT /v2/metricsSearches/{id} Update a metrics search page.

Loading…

Search Job 5

DELETE /v2/search/jobs/{jobId} Delete a search job.

Loading…
GET /v2/search/jobs/{jobId} Get a search job's status.

Loading…
GET /v2/search/jobs/{jobId}/messages Get paginated messages from an offset.

Loading…
GET /v2/search/jobs/{jobId}/records Get aggregated records.

Loading…
POST /v2/search/jobs Create a search job.

Loading…

Tokens 5

DELETE /v1/tokens/{id} Delete a token.

Loading…
GET /v1/tokens Get a list of tokens.

Loading…
GET /v1/tokens/{id} Get a token.

Loading…
POST /v1/tokens Create a token.

Loading…
PUT /v1/tokens/{id} Update a token.

Loading…

Transformation Rules 5

DELETE /v1/transformationRules/{id} Delete a transformation rule.

Loading…
GET /v1/transformationRules Get a list of transformation rules.

Loading…
GET /v1/transformationRules/{id} Get a transformation rule.

Loading…
POST /v1/transformationRules Create a new transformation rule.

Loading…
PUT /v1/transformationRules/{id} Update a transformation rule.

Loading…

Apps (Beta) 4

GET /v1/apps List available apps.

Loading…
GET /v1/apps/install/{jobId}/status App install job status.

Loading…
GET /v1/apps/{uuid} Get an app by UUID.

Loading…
POST /v1/apps/{uuid}/install Install an app by UUID.

Loading…

Archive Ingestion Management 4

DELETE /v1/archive/{sourceId}/jobs/{id} Delete an ingestion job.

Loading…
GET /v1/archive/jobs/count List ingestion jobs for all Archive Sources.

Loading…
GET /v1/archive/{sourceId}/jobs Get ingestion jobs for an Archive Source.

Loading…
POST /v1/archive/{sourceId}/jobs Create an ingestion job.

Loading…

Log Search Estimated Usage 4

POST /v1/logSearches/estimatedUsage Gets estimated usage details.

Loading…
POST /v1/logSearches/estimatedUsageByMeteringType Gets estimated usage details per metering type.

Loading…
POST /v1/logSearches/estimatedUsageByTier Gets Tier Wise estimated usage details.

Loading…
POST /v1/logSearches/estimatedUsageByView Gets estimated usage details per view.

Loading…

Metrics Searches (Beta) 4

DELETE /v1/metricsSearches/{id} Deletes a metrics search.

Loading…
GET /v1/metricsSearches/{id} Get a metrics search.

Loading…
POST /v1/metricsSearches Save a metrics search.

Loading…
PUT /v1/metricsSearches/{id} Updates a metrics search.

Loading…

Permissions 3

GET /v2/content/{id}/permissions Get permissions of a content item

Loading…
PUT /v2/content/{id}/permissions/add Add permissions to a content item.

Loading…
PUT /v2/content/{id}/permissions/remove Remove permissions from a content item.

Loading…

Threat Intel Datastore Management 3

DELETE /v1/threatIntel/datastore/db Remove the threat intel indicators DB

Loading…
GET /v1/threatIntel/datastore/db Get threat intel indicators DB information

Loading…
PUT /v1/threatIntel/datastore/dataSource/{dataSourceName} Updates source properties

Loading…

Threat Intel Ingestion 3

DELETE /v1/threatIntel/datastore/indicators Removes indicators by their IDS

Loading…
POST /v1/threatIntel/datastore/indicators/normalized Uploads indicators in a Sumo normalized format.

Loading…
POST /v1/threatIntel/datastore/indicators/stix Uploads indicators in a STIX 2.x json format.

Loading…

Health Events 2

GET /v1/healthEvents Get a list of health events.

Loading…
POST /v1/healthEvents/resources Health events for specific resources.

Loading…

Org Feature Settings 2

GET /v1/featureSettings Get a list of opt-in/out features.

Loading…
PUT /v1/featureSettings Update one or more feature settings.

Loading…

Password Policy 2

GET /v1/passwordPolicy Get the current password policy.

Loading…
PUT /v1/passwordPolicy Update password policy.

Loading…

Metrics Query 1

POST /v1/metricsQueries Run metrics queries

Loading…

Organizations Management 1

POST /v1/organizations/usages Get usages for child orgs.

Loading…

Schema Base Management 1

GET /v1/schemaIdentitiesGrouped Get schema base identities grouped by type and sorted by version.

Loading…

Service Map 1

GET /v1/tracing/serviceMap Get a service map.

Loading…

Change log

2026-09-26
- −GET /v1/threatIntel/datastore/retentionPeriod
- −POST /v1/threatIntel/datastore/retentionPeriod
2026-08-31
- +GET /v1/multi-account-management/content/sync
- +GET /v1/multi-account-management/content/sync/{jobId}/info
- +GET /v1/multi-account-management/content/sync/{jobId}/result
- +GET /v1/multi-account-management/content/sync/{jobId}/status
- +POST /v1/multi-account-management/content/sync
- +POST /v1/multi-account-management/content/sync/{jobId}/cancel
- +POST /v1/multi-account-management/content/sync/{jobId}/retry
2026-08-20
- +DELETE /v2/search/jobs/{jobId}
- +GET /v2/search/jobs/{jobId}
- +GET /v2/search/jobs/{jobId}/messages
- +GET /v2/search/jobs/{jobId}/records
- +POST /v2/search/jobs
2026-08-08
- +GET /v1/featureSettings
- +PUT /v1/featureSettings
2026-08-04
- ⚠DELETE /v1/sourceTemplate/{id}
- ⚠GET /v1/sourceTemplate
- ⚠GET /v1/sourceTemplate/{id}
- ⚠POST /v1/sourceTemplate
- ⚠POST /v1/sourceTemplate/{id}
- ⚠POST /v1/upgrade/sourceTemplate/{id}
- ⚠PUT /v1/sourceTemplate/{id}/status
2026-07-27
- +DELETE /v1/dataarchiving/destinations/{id}
- +GET /v1/dataarchiving/destinations
- +GET /v1/dataarchiving/destinations/{id}
- +POST /v1/dataarchiving/destinations
- +PUT /v1/dataarchiving/destinations/{id}

Get started

What it covers

Endpoints

Monitors 22

Policies 20

Parsers Library Management 18

Dashboard (New) 17

SLOs 16

Source Template Management 16

Traces 15

Content 13

Folders 13

Account 12

Muting Schedules 12

Apps V2 (Beta) 11

Field Management 10

Logs Data Forwarding 10

SAML Configuration 10

Service Accounts 10

Span Analytics 10

Users 10

Lookup Tables 9

OAuth Management (Beta) 9

Scheduled Views 8

Access Keys 7

Budget Management 7

Connections 7

Content and Configuration Management 7

Partitions 7

Roles 7

Roles V2 7

Data Masking Rules (Beta) 6

Event Analytics (Beta) 6

Ingest Budgets V2 6

OpenTelemetry Collector Management 6

SCIM User Management 6

Service Allowlist 6

Data Archiving 5

Data Deletion Rules (Beta) 5

Dynamic Parsing 5

Field Extraction Rules 5

Log Searches 5

Macro Management APIs 5

Metrics Searches (New) 5

Search Job 5

Tokens 5

Transformation Rules 5

Apps (Beta) 4

Archive Ingestion Management 4

Log Search Estimated Usage 4

Metrics Searches (Beta) 4

Permissions 3

Threat Intel Datastore Management 3

Threat Intel Ingestion 3

Health Events 2

Org Feature Settings 2

Password Policy 2

Metrics Query 1

Organizations Management 1

Schema Base Management 1

Service Map 1

Change log