SIEM integration
Automate Sumo Logic Cloud SIEM with plain language
Read Sumo Logic Cloud SIEM insights, signals and entities, and add a comment or custom insight from VernacSecure SuperBot™.
What you can do
Sumo Logic Cloud SIEM — SEC API v1
- List insights and signals
- Read entities and their activity scores
- Comment on an insight
Connection: basic authentication against https://api.sumologic.com. Credentials are encrypted at rest, or prompted per action if you prefer never to store them.
Example
Ask in plain English
Prompt: “Show the last 24 hours of high severity alerts in Sumo Logic Cloud SIEM”
Result: VernacSecure SuperBot™ runs the search, normalises the results and offers follow-up actions on other integrations.
Read actions
- Fetch insights — Lists Cloud SIEM insights.
- Fetch signals — Lists Cloud SIEM signals.
- Fetch entities — Lists tracked entities.
Write actions
This integration is read-only today. Write actions are added upstream as the vendor API exposes them.
Related siem automation pages
Armor Point · Datadog Cloud SIEM · Devo Platform · Elastic Security · Exabeam Security Operations · Fortinet FortiSIEM